(This assumes you are already set up with public/private key auth to your Linux desktop workstation at home) your home xfce desktop normally has vnc session listening on port 5901 localhost only, spawned with: vnc4server -geometry 1920x1080 -localhost Forward port 443 through your home router/NAT to the RFC1918 address of the SSH port (22) of the machine running xorg/XFCE4/VNC To access from the outside world, on your client device, do the following: ssh -v -L 5901:localhost:5901 -N -f -l yourusername -p 443 your.home.ip.address use client system's vnc client software to connect to 127.0.0.1:5901