# Linux help, access gateway via ssh **URL:** \ **Category:** General Discussion\ **Created:** [March 26, 2026, 2:25am UTC](https://forum.inductiveautomation.com/t/linux-help-access-gateway-via-ssh/114687 "2026-03-26T02:25:56Z")\ **Posts on this page:** 12\ **Page:** 1
**Author:** ![AngrySparky](https://avatars.discourse-cdn.com/v4/letter/a/f07891/32.png) [@AngrySparky](https://forum.inductiveautomation.com/u/AngrySparky)\ **Post date:** [March 26, 2026, 2:25am UTC](https://forum.inductiveautomation.com/t/linux-help-access-gateway-via-ssh/114687/1 "2026-03-26T02:25:56Z")
Set up a Ubuntu server in a virtualbox VM today. Im very green with the whole command line interaction with a computer, and VMs, and Linux in general. I believe I got ignition successfully installed after some Google fu. I was also able to connect to the Ubuntu server via ssh from the host machines windows command line using at local host. What i was attempting to do was access the gateway web page of the vm server from the browser on the host via an ssh connection. I think I just want to forward the single port over ssh but I cant seem to get the command right. I kept getting a refused to connect error on the web page. Its my impression that this is the best way to access a headless ignition gateway on linux so I want to learn how to do it. Anyone willing to walk this knuckle dragger through it? ---
**Author:** ![andrew.budaiev](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/andrew.budaiev/32/72921_2.png) [@andrew.budaiev](https://forum.inductiveautomation.com/u/andrew.budaiev)\ **Post date:** [March 26, 2026, 2:54am UTC](https://forum.inductiveautomation.com/t/linux-help-access-gateway-via-ssh/114687/2 "2026-03-26T02:54:03Z")
> [@AngrySparky](#): > > What i was attempting to do was access the gateway web page of the vm server from the browser on the host via an ssh connection. I do not fully understand it, but if you want to access gateway through the host you will need to open `8088` port on the VM using `ufw` if you enabled your firewall. I assume you've opened `22` ssh port previously. ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [March 26, 2026, 3:04am UTC](https://forum.inductiveautomation.com/t/linux-help-access-gateway-via-ssh/114687/3 "2026-03-26T03:04:19Z")
> [@AngrySparky](#): > > best way to access a headless ignition gateway No. Just open the proper ports. ---
**Author:** ![AngrySparky](https://avatars.discourse-cdn.com/v4/letter/a/f07891/32.png) [@AngrySparky](https://forum.inductiveautomation.com/u/AngrySparky)\ **Post date:** [March 26, 2026, 4:37am UTC](https://forum.inductiveautomation.com/t/linux-help-access-gateway-via-ssh/114687/4 "2026-03-26T04:37:06Z")
Well now that you point that out, duh. Guess I was making that a lot harder than it needed to be. I just need to open port 8088 then point my browser to serverip:8088. I would only need to use ssh if I needed to run commands on the server, right? Did I mention the knuckle dragging and mouth breathing… ---
**Author:** ![David\_Stone](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/david_stone/32/79749_2.png) [@David\_Stone](https://forum.inductiveautomation.com/u/David_Stone)\ **Post date:** [March 26, 2026, 7:28am UTC](https://forum.inductiveautomation.com/t/linux-help-access-gateway-via-ssh/114687/5 "2026-03-26T07:28:09Z")
There are a lot of misleading forum posts around the internet that tell you that you must use tunnelled connections of every service that isn't secure and tested etc... Ignition is a production server setup that is regularly exposed directly to the internet in various ways, so exposing the 8088 port is perfectly OK, especially on an internal network. ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [March 26, 2026, 12:30pm UTC](https://forum.inductiveautomation.com/t/linux-help-access-gateway-via-ssh/114687/6 "2026-03-26T12:30:14Z")
FWIW, I encourage using ports 80 and 443, using an `AmbientCapabilities` override in SystemD to allow it for a non-root Ignition service. This greatly improves compatibility with IT systems of all kinds, and is very helpful if you ever plan to use proper public certificates (such as Let's Encrypt). Not to mention allowing your users to just use a plain domain name to make connections. ---
**Author:** ![AngrySparky](https://avatars.discourse-cdn.com/v4/letter/a/f07891/32.png) [@AngrySparky](https://forum.inductiveautomation.com/u/AngrySparky)\ **Post date:** [March 26, 2026, 1:48pm UTC](https://forum.inductiveautomation.com/t/linux-help-access-gateway-via-ssh/114687/7 "2026-03-26T13:48:04Z")
I will keep this in mind even if I only sorta understand it. Thanks everyone for the help. Sure enough this morning I set port forwarding in virtualbox to forward guest 8088 to host 8088 and I can log into the gateway just like if it was installed locally. Virtualbox is just for testing without hardware but final solution should be easy enough. ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [March 26, 2026, 1:54pm UTC](https://forum.inductiveautomation.com/t/linux-help-access-gateway-via-ssh/114687/8 "2026-03-26T13:54:04Z")
> [@AngrySparky](#): > > Sure enough this morning I set port forwarding in virtualbox to forward guest 8088 to host 8088 and I can log into the gateway just like if it was installed locally. Note that this step is optional and probably not very common among people using VMs. It's perfectly natural to access your Gateway in the browser at `someotherip:8088` and launch your Designer against a remote Gateway. This is probably the most common setup you'll encounter in the real world. You generally do not design on, or access the Gateway web interface from, the same machine running the Gateway. Now you've just set yourself up to get confused in the future when you forget about the port forwarding setup and go looking for Ignition installed on your local machine because you see `localhost` in the browser. ---
**Author:** ![AngrySparky](https://avatars.discourse-cdn.com/v4/letter/a/f07891/32.png) [@AngrySparky](https://forum.inductiveautomation.com/u/AngrySparky)\ **Post date:** [March 26, 2026, 2:58pm UTC](https://forum.inductiveautomation.com/t/linux-help-access-gateway-via-ssh/114687/9 "2026-03-26T14:58:41Z")
Totally makes sense. I got it working the normal way on a different Debian vm, once I figured out how to set up the virtualbox network right. Brand new to virtualbox so still figuring it out and playing with different linux distros. Final install won't use VM but just using it to experiment on an old laptop. ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [March 26, 2026, 3:02pm UTC](https://forum.inductiveautomation.com/t/linux-help-access-gateway-via-ssh/114687/10 "2026-03-26T15:02:55Z")
You might find this topic helpful: > [@Question for the integrators](https://forum.inductiveautomation.com/t/question-for-the-integrators/114667): > > How are you setting up your laptops? I'm currently running Win11, initially with everything installed directly on it. And that quickly has become a headache. And then I needed VMs to run XP since had to fire up Concept 2.5.. So I added Virtualbox and created VMs and started moving stuff into VMs dedicated to specific software (Rockwell, Unity, Concept, iFix, etc.). That seems to be heading in a better direction (we'll just not talk about Windows licensing). I'm at the point where I'm think… In my experience, the fastest way to really learn Linux is to make it your bare metal daily driver. ---
**Author:** ![AngrySparky](https://avatars.discourse-cdn.com/v4/letter/a/f07891/32.png) [@AngrySparky](https://forum.inductiveautomation.com/u/AngrySparky)\ **Post date:** [March 26, 2026, 3:24pm UTC](https://forum.inductiveautomation.com/t/linux-help-access-gateway-via-ssh/114687/11 "2026-03-26T15:24:55Z")
My main computer is a crappy windows laptop IT gave me and I imaged my old laptop over to it because it has all the plc, hmi, other programming stuff on it. Ive thought about dumping it to linux and setting up a VM to run windows. Just havent taken the leap yet, probably should to keep the important plc stuff isolated from all the other goofy stuff i do with it. My only real experience with linux is a few years ago a took an ancient programming laptop we had laying around and converted it to Ubuntu. It would barely boot with windows but runs great on Ubuntu. I played with node red and basic html5 on it for a little bit just messing around. Right now im using another old programming laptop from 2018 or so to experiment and check things out. So far got Ubuntu server, Ubuntu desktop, Debian with KDE plasma desktop in VMs. Have mint downloaded, and will probably take a look at kubuntu. ---
**Author:** ![bkarabinchak.psi](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/bkarabinchak.psi/32/83567_2.png) [@bkarabinchak.psi](https://forum.inductiveautomation.com/u/bkarabinchak.psi)\ **Post date:** [March 26, 2026, 3:41pm UTC](https://forum.inductiveautomation.com/t/linux-help-access-gateway-via-ssh/114687/12 "2026-03-26T15:41:14Z")
If you have windows 10/11 you can install WSL Windows Subsystem for Linux which lets you use Linux commands directly on your Windows through an Ubuntu terminal. It won’t be the same as actually installing things on linux and editing etc files but you can get used to some of the basics like this.