Probably a collection of techniques. • OpenSSH allows you to configure proxy hosts • Set up port forwards • Use OpenSSH's dynamic port forward (SOCKS) support, but I'm not sure how to configure pulumi to use a socks proxy