SSH Tunnel Manager for MAC
Free, open-source menu bar app for SSH port forwards: local, remote and SOCKS tunnels, jump hosts and automatic reconnects in one click.
SSH Tunnel Manager Overview
SSH Tunnel Manager is a lightweight menu bar app for managing SSH port forwards on the Mac. Instead of typing ssh -N -L commands in Terminal and forgetting which tunnels are running, you set each tunnel up once in Settings and switch it on or off from the menu bar. It is written in native Swift and AppKit and uses the SSH that comes with macOS, with no bundled binaries.
One tunnel can carry many port mappings over a single SSH connection: local forwards, remote forwards and SOCKS proxies, and it can reach hosts behind a bastion through a jump host. Tunnels reconnect by themselves when they drop, and a failed tunnel tells you why: authentication, connection refused, host unreachable, DNS, a changed host key or a port already in use. SSH Tunnel Manager is made by 0fuz and is free and open source under the MIT license. Version 1.10.1 makes the SSH config alias picker follow Include directives. It needs macOS 14 or later. The app is not notarized by Apple, so on first launch you right-click it in Applications and choose Open, or allow it under System Settings → Privacy & Security.
Key Features
SSH Tunnel Manager keeps your SSH tunnels one click away.
- Menu bar app: always at hand, with no Dock icon.
- Many forwards per tunnel: several local and remote mappings over one SSH connection.
- SOCKS proxy: dynamic forwarding per mapping, with ready-to-copy proxy addresses.
- Jump host: reach servers behind a bastion, including multi-hop chains.
- Auto-reconnect: dropped tunnels come back on their own.
- Clear failure reasons: see why a tunnel failed, not just that it disconnected.
- Groups: organize tunnels with dividers and switch a whole group at once.
- SSH config aliases: reuse hosts from your ~/.ssh/config.
What’s New in Version 1.10.1
SSH Tunnel Manager 1.10.1 is a small fix release.
- The SSH config alias picker now follows Include directives.
SSH Tunnel Manager FAQ
Is SSH Tunnel Manager free?
Yes. SSH Tunnel Manager is free and open source under the MIT license.
Which macOS version does SSH Tunnel Manager need?
It needs macOS 14 or later.
Why does macOS warn me when I open it?
The app is not notarized by Apple. On first launch, right-click it in Applications and choose Open, or allow it under System Settings → Privacy & Security → Open Anyway.
What kinds of tunnels does it support?
Local forwards (ssh -L), remote forwards (ssh -R) and SOCKS proxies (ssh -D). One tunnel can hold several mappings over a single SSH connection.
Can I reach a server behind a bastion host?
Yes. Set the bastion as the Jump Host in the tunnel’s Advanced section and the app adds ssh -J. Multi-hop chains are supported.
What happens when my connection drops?
Tunnels reconnect automatically. You can also turn on a sound and notification for when a tunnel drops or comes back.
Does it bundle its own SSH?
No. It uses the SSH that comes with macOS, and it can reuse host aliases from your ~/.ssh/config.
Can tunnels start when I log in?
Yes. The app can launch at login, and tunnels marked for auto-connect start when the app opens.
Where are my tunnel settings stored?
In ~/Library/Application Support/SSHTunnelManager/tunnels.json.
Where does the SSH Tunnel Manager download on ssh-tunnel-manager.FULLMAC.app come from?
The download button leads to the official SSH Tunnel Manager releases on GitHub at https://github.com/0fuz/ssh-tunnel-manager/releases/latest. ssh-tunnel-manager.FULLMAC.app does not change or repackage the app.
Similar Apps
LanGuardLanGuard is a free, open-source menu bar app that turns Wi-Fi off the moment a wired network link goes up and switches it back on when you unplug. By default macOS keeps Wi-Fi running even when your Mac is docked over Ethernet, which leaves a second network route active and can send traffic out the wrong connection. LanGuard handles the switch for you. It acts only on plug and unplug moments, so if you turn Wi-Fi back on by hand while docked, it stays on until you next unplug the cable.Internet Utilities
WhatRouteWhatRoute is a network diagnostic utility for the Mac. Its main job is traceroute: it shows each router your data passes through on its way to another computer. It can also ping, run Domain Name Service queries and Whois lookups, and monitor the traffic to and from your Mac. A geolocation service places the routers on a world map, so you can see the geographical path your packets take across the Internet, and a selected area can be opened in Apple Maps or Google Maps for a closer view.Internet Utilities
HoleberryHoleberry is a native menu bar app for people who run Pi-hole, the network-wide ad blocker. It puts your Pi-hole on the Mac menu bar, so you can check blocking status and query stats, pause blocking, and handle blocked domains without opening the Pi-hole web interface. The menu bar icon shows your Pi-hole's health at all times, and the menu shows total queries and blocked domains. When a page fails to load because Pi-hole blocked it, Holeberry detects the current tab in Safari, Orion, Chrome and Chromium browsers, Firefox, Zen and others, and unblocks that exact domain with one click, so the rest of your network stays protected.Internet Utilities
WiFi LensWiFi Lens is a native Mac app for understanding the Wi-Fi around you. It scans nearby networks across the 2.4, 5 and 6 GHz bands, charts channel occupancy, scores congestion and recommends channels for your region. For each network you can inspect the PHY generation, channel width, 802.11k/r/v support and WPA3, and for your own connection the IP, gateway, DNS, MAC, transmit rate and security summary. A roaming test monitors handoffs between access points, a heatmap compares occupancy per band, and AP Radar helps you track a selected access point by signal strength, with optional audio feedback.Internet Utilities
VPN BypassVPN Bypass is a menu bar app for macOS that decides which traffic goes through your VPN. You pick the services and domains that should skip the VPN, or the few that must use it, and the app keeps the routes right as the VPN reconnects and addresses change. It is meant for full-tunnel VPN clients that send everything through the tunnel, which can stall streaming and break AirPlay or Chromecast.Internet Utilities
TunnelblickTunnelblick is a free graphical interface for OpenVPN on macOS. It gives you easy control of OpenVPN connections from an icon in the menu bar: install the configuration file your VPN provider, school or company gives you, then connect and disconnect with a click. You can keep several configurations, see the status of each connection, and use the options for network monitoring and IPv6 that Tunnelblick offers to keep your connection behaving as expected.Internet Utilities
More from 0fuz
FULLMAC.app does not host this app. Download buttons lead to the developer’s own pages.