VNC only over SSH

Question

How can I configure VNC server so that it can be accessed only via SSH tunnel?

With the default VNC server setting, there are at least two ways for someone else to login to my computer: by directly logging into my VNC server and my SSH server. Two doors to worry about.

Answer 1

Bind your VNC server to localhost and do an SSH proxy to your server and tunnel VNC (client) over said proxy.

Answer 2

All you need is explained here: Reversing an ssh connection

Answer 3

If your using CentOs there is a pretty useful guide on here.