SSH tunnels let you access remote databases and internal services without exposing them to the internet. Here is every forwarding mode I use.