| CARVIEW |
Select Language
HTTP/2 301
content-security-policy: script-src 'sha256-1az3CiAdXAaMP3TFl5msfrDjNuSHMdg1ecAgxfZPR50=' 'unsafe-inline' 'strict-dynamic'; object-src 'none'; base-uri 'none'; report-uri https://csp.withgoogle.com/csp/chromium-website/
location: /chromium-os/developer-library/reference/security/port-forwarding/
content-type: text/plain; charset=utf-8
accept-ranges: bytes
date: Fri, 10 Oct 2025 05:43:18 GMT
x-served-by: cache-bom-vanm7210060-BOM
x-cache: MISS
x-cache-hits: 0
x-timer: S1760074999.843382,VS0,VE116
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 81
HTTP/2 200
cache-control: max-age=3600
content-encoding: gzip
content-security-policy: script-src 'sha256-1az3CiAdXAaMP3TFl5msfrDjNuSHMdg1ecAgxfZPR50=' 'unsafe-inline' 'strict-dynamic'; object-src 'none'; base-uri 'none'; report-uri https://csp.withgoogle.com/csp/chromium-website/
content-type: text/html; charset=utf-8
etag: "ab2022f92b7665354abf83d40fa6e5ccf1851ff6f61954648ce10b85810cc779"
last-modified: Fri, 10 Oct 2025 02:31:02 GMT
strict-transport-security: max-age=31556926
accept-ranges: bytes
date: Fri, 10 Oct 2025 05:43:19 GMT
x-served-by: cache-bom-vanm7210060-BOM
x-cache: MISS
x-cache-hits: 0
x-timer: S1760074999.972254,VS0,VE241
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1990
Port forwarding and tunneling in ChromeOS
The Chromium Projects
Port forwarding and tunneling in ChromeOS
localhost to Crostini
ChromeOS will forward ports from localhost into Crostini. This allows
developers to use Chrome to access their development environment inside
Crostini.
cicerone will ask chunnel to tunnel all ports listening in the Crostini container, except:
- Privileged (<1024) since chunnel lacks
CAP_NET_BIND_SERVICE. - 2222 (SFTP for the ChromeOS Files app) and 5355 (Link-Local Multicast Name Resolution) which are blocked.
Moreover, tunneled ports are locked down
to reject traffic from non-chronos UIDs.