Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

What is the difference between a tunnel, a VPN tunnel and an SSH tunnel? According to Wikipedia, "tunneling" is:

Tunneling typically contrasts with a layered protocol model such as those of OSI or TCP/IP. The delivery protocol usually (but not always) operates at a higher level in the model than does the payload protocol, or at the same level.

But that doesn't really mean much to me. So is a tunnel like HTTP being used to carry a TCP payload?

I guess all this "tunnel terminology" would make sense with a few practical (real-life) examples.

share|improve this question
up vote 4 down vote accepted

A SSH tunnel (mostly used as a socks proxy) is only working for TCP packets, as a VPN (like OpenVPN or PPTP) will also be able to work with UDP packets.

Browsing the web is only TCP, however most games are using UDP aswell. Also, if using a VPN you don't need to configure each application to use the VPN (since your OS will do this) but a socks proxy (for a SSH tunnel) do require some configuration.

If your application doesn't support these protocols, something as ProxyCap can be used to force applications to use that socks proxy.

share|improve this answer

With vpn, your computer becomes part of another network. All traffic between your computer and the target network is encrypted. You have access to all computers on the target network directly from your computer.

With ssh, you just connect to another host, but you don't become part of the server's network.

An analogy. Consider there is a discussion but you are not present. There is a phone. You call the room where the discussion takes part. If the phone in the remote room is a speaker phone, then your voice can be heard by everybody and everybody can talk to you directly. This is the vpn since for all practical purposes, you are virtually present.

If the phone is not speaker-phone capable, then you can talk only to one person at a time who relays the messages. That's the ssh analogy.

share|improve this answer
Thanks @David - thats the difference between VPN and SSH, but what about this tunneling stuff? – pnongrata Jun 13 '12 at 19:39
The SSH tunnel forwards TCP connections only. A VPN forwards IP packets or network frames. – superuser Jun 13 '12 at 19:41

The SSH tunnel forwards TCP connections only. A VPN forwards IP packets or network frames. A IP packet forwarding VPN can link IP subnets (with all IP-based protocols), and a network frame forwarding (bridged) VPN can link so the participants seem to be in the same Ethernet.

Encrypted similarly, there is no essential difference in security between a VPN and SSH tunnel.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.