ssh tunnel forward display VNC back through a jumphost
Client --> (ssh) --> Jumphost (ssh) --> server (VNC) Host Jumphost HostName HOSTNAME or IP_Jumphoost User user_account IdentityFile ~/.ssh/cbinternal_rsa IdentitiesOnly yes Host SERVER HostName hostname or IP_SERVER User account IdentityFile ~/.ssh/cbinternal_rsa IdentitiesOnly yes ProxyJump Jumphost on the jumphost, modify the ssh_config Match Group GROUP or USER_NAME AllowTcpForwarding Yes PermitOpen SERVER:22 restart ssh