Sometimes we want to access a locally available device from a external facing ip address. (e.g. Like a computer on a local lan network with a separate wireguard interface.)
We can do this by using a SSH tunnel
ssh user@remotehost -L localport:host_reachable_from_remote_host:remoteport
e.g.