From 8d71128c176c146f5a714b09824fa03dbb394b3f Mon Sep 17 00:00:00 2001 From: Ngo Quoc Dat Date: Thu, 22 Oct 2026 07:13:37 +0700 Subject: [PATCH] docs(ios): the Mac's ~/.ssh/config route reaches iPhone and iPad --- connections/ssh-tunneling.mdx | 2 ++ ios/index.mdx | 4 ++++ 2 files changed, 6 insertions(+) diff --git a/connections/ssh-tunneling.mdx b/connections/ssh-tunneling.mdx index dfd6da2..bda84a0 100644 --- a/connections/ssh-tunneling.mdx +++ b/connections/ssh-tunneling.mdx @@ -73,6 +73,8 @@ Pick an alias from the **Config Host** picker and `HostName`, `User`, `Port`, `I `IdentityFile` picks which agent key is offered, not only which key file is read, and a `.pub` is enough. That is how a 1Password or Secretive key gets pinned to a host. `IdentitiesOnly yes` then drops every agent key the config did not name, which is what keeps a thirty-key agent inside a server's `MaxAuthTries`. +Once a connection opens, the hosts, ports and usernames it reached through the config sync to [iPhone and iPad](/ios#route-from-mac), so it opens there too. The config file, keys and key paths stay on the Mac. + Config Host picker Config Host picker diff --git a/ios/index.mdx b/ios/index.mdx index 6a07cf0..bb58874 100644 --- a/ios/index.mdx +++ b/ios/index.mdx @@ -274,6 +274,10 @@ Hops synced from the Mac arrive with key paths that name files on the Mac, so ea Edit Connection form with two jump hosts marked No key on this device, beside the editor for bastion1.example.com with Same Key as SSH Server switched off +### Route from Mac + +A tunnel whose SSH host is an alias in the Mac's `~/.ssh/config`, or that the Mac reaches through `ProxyJump`, opens here through the hosts the Mac dialed. They arrive once the Mac has connected, under **Route from Mac** in the connection's form: each jump host, then the SSH server, with the port and username the Mac used. Only hosts, ports and usernames cross; the config file, keys and key paths stay on the Mac. A hop only the Mac's config names reads **No key on this device** until you open it and pick or paste its key, as for any jump host. Changing the SSH server or jump hosts, here or on the Mac, sets the route aside until the Mac connects again, and a copy made here with **Duplicate** gets its own once the Mac connects to it. + ### SSH profiles A connection that uses an [SSH profile](/connections/ssh-profiles) on the Mac arrives with the profile's server, sign-in method and jump hosts, read only in the form: change them in the profile on the Mac. It signs in with the profile's password once the Mac syncs passwords to iCloud Keychain; until then the password field works as it does for any tunnel. A key passphrase saved here wins over the profile's, since it goes with the key on this device. Turning **SSH Tunnel** off unlinks the profile from that connection on every device.