Skip to main content

Documentation Index

Fetch the complete documentation index at: https://artie.com/docs/llms.txt

Use this file to discover all available pages before exploring further.

​
Prerequisites

  • A server (e.g. EC2 instance) that can reach your database over the private network
  • SSH access to that server (port 22 open from Artie’s IP range)
  • Your database must be reachable from the SSH tunnel host
SSH tunnels are supported for all source and destination connectors that use a direct database connection.

​
How to set up an SSH tunnel

1

Create a tunnel host

Create a new EC2 instance (or equivalent) that has network access to your database. Record the public IP address and SSH port (default: 22).
2

Create an SSH tunnel in Artie

Go to Settings > SSH tunnels tab and click New SSH tunnel. Enter the public IP address and port from the previous step, then click Save.
3

Copy the public key

After saving, Artie generates a public key for the tunnel. Copy this key, you will add it to your tunnel host in the next step.
Public key in the pipeline creation form
4

Add the public key to your tunnel host

SSH into your tunnel host and add the public key to ~/.ssh/authorized_keys. We recommend creating a dedicated service account for Artie.
sudo adduser -m artie
sudo su artie
mkdir -p ~/.ssh

# Paste the public key from Artie into authorized_keys
vi ~/.ssh/authorized_keys

chmod 700 ~/.ssh
chmod 600 ~/.ssh/authorized_keys
5

Use the tunnel in your pipeline

When creating or editing a source or destination, select the SSH tunnel you created from the SSH tunnel dropdown.
Make sure the SSH tunnel host’s security group allows inbound SSH traffic (port 22) from Artie’s IP range. If your tunnel host cannot be reached, the pipeline will fail to connect.

​
FAQ

Yes. You don’t need to create a new instance — any server that can reach your database and accepts SSH connections will work. Just add the Artie public key to the authorized_keys file on that host.
Artie connects to the SSH tunnel host on the port you specify during setup (default: 22). The tunnel then forwards traffic to your database on its private port.
Delete the existing SSH tunnel in Artie and create a new one. This generates a new key pair. Then replace the old public key in ~/.ssh/authorized_keys on your tunnel host with the new one.