This proxies the local SSH client to ssh.example.com through Cloudflare's Access service, which authenticates you with your identity provider before the connection reaches the server on localhost:22. It is the client-side half of Access-protected SSH, usually configured as a ProxyCommand in ~/.ssh/config. No VPN is needed.
Looking for more? Search all 7,657 commands — works offline, in English or Spanish, and fixes typos.