TigerVNC - ArchWiki
https://wiki.archlinux.org/title/TigerVNCThe VNC server has been setup on the remote machine to only accept local connections. Now, the client must open a secure shell with the remote machine (10.1.10.2 in this example) and create a tunnel from the client port, for instance 9901, to the remote server 5901 port.