Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I want to provide a remote employee remote desktop into a PC in the office and am trying to decide between the following two options:

  1. Use Microsoft VPN to get him a local network IP. Use RDP to connect to host machine.
  2. Use local SSH tunneling for VPN port. Connect RDP to localhost:portNumber

Is either option more secure than the other? Will either option perform better than the other? Are there any better options I've missed or considerations I should make?

share|improve this question
What do you call "local SSH tunneling for VPN port" ? – Gregory MOUSSAT Mar 18 '12 at 16:34
ssh -L 8888:localhost:3389 remoteDesktopHost. Then remote desktop to localhost:8888 – Jonathan Mar 18 '12 at 17:53
up vote 4 down vote accepted

Both VPN and SSH are secure, I think it's more important to check the performance and usability of each option. If you want better performance NX would be interesting for you.

share|improve this answer

Your other main option would be some form of Terminal Services Gateway ( ) of Remote desktop Web gateway ( ) depending on your version of Windows.

Which option is best depends on the skill of your users, while developers/techs may be able to figure out SSH tunnels, VPN or web gateways are probably easier for non-technical users.

All options are encrypted so you should be fine on that front and performance will depend more on other network factors than any of those above choices (in my experience).

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.