AppFog: Tunnel to your database from your dev machine

SSH tunneling is not possible in PaaS environments.

Caldecott leverages CloudFoundry's existing interfaces (e.g. router, service bindings, authentication).

As a platform as a service provider, we've faced many challenges while operating OpenSSH for our customers, ranging from managing authentication with its authorized_keys files or custom patches, integrating with existing auditing systems and so on.

In corporate environments where outgoing, non-HTTP traffic is blocked by default, individual developers can get their jobs done without going to 17 meetings over seven months to plead their case.