Recent problem where I needed to VNC to a host but the host was not directly routable. So I needed to send my traffic to a routable host and then tunnel it over to the final target host. SSH did the trick here:
ssh -g -L rhost:5900:host:5900 host
Where “rhost” is the intermediate server and “host” is the final target server.