SSH Tunnel for clusters without public listening ports

So if the cluster has no public ports, but you have ssh on the nodes, you can create a tunnel between you machine and the target:

ssh -N -L 9200:localhost:9200 user@target

But would be supper cool to have as an option. I think paramiko can do that for us.
