# SSH Tunnel Workaround for iPhone Proxy

## The Problem
Oracle Cloud Security List blocks proxy ports, and you don't have console access right now.

## Solution: SSH Tunnel via Your Mac

Since SSH (port 22) is already open, we can use it to tunnel proxy traffic!

### Step 1: Create SSH Tunnel on Your Mac

Open Terminal on your Mac and run:

```bash
ssh -L 7890:127.0.0.1:7890 -N server2
```

Or run in background:
```bash
ssh -f -N -L 7890:127.0.0.1:7890 server2
```

This creates a tunnel: `Your Mac:7890` → `SSH` → `server2:7890`

### Step 2: Configure iPhone to Use Your Mac as Proxy

**Option A: If Mac and iPhone on Same Wi-Fi**

1. **On your Mac:**
   - System Settings → Network → Wi-Fi → Details → TCP/IP
   - Note your Mac's local IP (e.g., `192.168.1.100`)

2. **On iPhone:**
   - Settings → Wi-Fi → ⓘ (next to your Wi-Fi network)
   - Scroll to **HTTP Proxy** → **Manual**
   - **Server:** `192.168.1.100` (your Mac's IP)
   - **Port:** `7890`
   - **Authentication:** Off (SSH tunnel doesn't need it, but Clash does)

**Wait - this won't work because Clash needs authentication...**

### Better Solution: Use SOCKS Proxy Over SSH

Actually, SSH can create a SOCKS proxy directly!

### Step 3: Use SSH SOCKS Proxy (Better Method)

**On your Mac, run:**
```bash
ssh -D 1080 -N server2
```

This creates a SOCKS5 proxy on your Mac at `127.0.0.1:1080`

**Then on iPhone (same Wi-Fi):**
- Settings → Wi-Fi → ⓘ → HTTP Proxy → Manual
- **Server:** `192.168.1.100` (your Mac's IP)
- **Port:** `1080`
- **Type:** SOCKS5 (if option available)

**But iOS HTTP Proxy doesn't support SOCKS5...**

### Best Workaround: Use a Proxy App on Mac

Install a local proxy server on your Mac that:
1. Connects to server2 via SSH tunnel
2. Provides HTTP proxy for iPhone

### Alternative: Use Tailscale (If Available)

If you can use Tailscale:
1. Enable Tailscale VPN on iPhone
2. Configure Shadowrocket to use: `100.70.115.1:7890`
3. This bypasses Oracle Cloud firewall

### Simplest Workaround: Keep SSH Tunnel + Use Mac as Bridge

1. **On Mac:** Create SSH tunnel to server2's Clash
2. **On Mac:** Run a local proxy server that iPhone can connect to
3. **On iPhone:** Connect to Mac's proxy

Let me create a script for this...