{
  "id": 5359889,
  "title": "RDP Into a Proxmox VM Without Opening It Up to the Network",
  "url": "https://urgent.news/2026/09/03/rdp-into-a-proxmox-vm-without-opening-it-up-to-the-network",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-09-03T16:08:29.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/lugerlogic/rdp-into-a-proxmox-vm-without-opening-it-up-to-the-network-52nj"
  },
  "original_language": "en",
  "account": "One way to access an Ubuntu Desktop virtual machine on a Proxmox server without opening RDP directly to the network is to tunnel RDP traffic through SSH. This method relies on trusting the SSH connection to the Proxmox host. The laptop connects to the SSH tunnel on localhost port 3389, which secretly relays the RDP traffic to the VM.\n\nTo set up the VM, install and run xrdp as usual. On the laptop, add a line to the .ssh/config file:\nHost proxmox-rdp\nHostName proxmox-host-ip\nUser your-user\nLocalForward 3389 VM_IP:3389\n\nThis LocalForward line forwards local port 3389 to the VM's port 3389. To connect, follow these steps:\n1. Start the VM in Proxmox.\n2. Open the tunnel using the command: ssh proxmox-rdp -N. The -N option forwards the port without starting an interactive session.\n3. RDP to localhost:3389.\n\nAfter closing the terminal, the tunnel closes, and RDP access stops. By using SSH to carry RDP traffic, only SSH needs to be exposed, not RDP. The RDP data travels encrypted inside the SSH connection. Be aware that if the VM's IP changes to DHCP after a reboot, update the LocalForward line to use a static IP or configure a DHCP reservation to prevent the tunnel from becoming stale.",
  "summary": "I run an Ubuntu Desktop VM on my Proxmox server and wanted to RDP into it without exposing port 3389 to my whole network. What i ended up with: tunnel RDP through SSH . The Idea I already trust my SSH connection to the Proxmox host. So instead of opening RDP up directly, I have SSH secretly carry the RDP traffic for me: [Laptop] --localhost:3389--> [SSH tunnel] --> [Proxmox host] --3389--> [VM]…",
  "key_points": [
    "Tunnel RDP traffic through SSH to connect VM without direct network exposure.",
    "Add Host proxmox-rdp entry to .ssh/config on laptop for SSH tunnel setup.",
    "Use ssh proxmox-rdp -N command to start forwarding port 3389 to VM."
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}