Querious can utilitize SSH to create secure encrypted connections to remote servers.
When using SSH, all communication with the MySQL server is forwarded through a secure tunnel created by SSH. See the diagram above for an illustration of this process. The local SSH instance creates a secure connection to SSH on a remote machine Querious calls the "SSH Host". The local SSH instance listens to all traffic on a local port ("Tunnel Port"). The local SSH instance forwards all traffic coming into this local port, over the secure tunnel to the SSH Host, which then sends it over an insecure connection the destionation "Host" on the given "Port".
The SSH Host and destination Host may actually be the same machine. In such cases, the "Host" would simply be "127.0.0.1" or "localhost".
If for some reason you need to customize the tunnel creation, you can create an SSH tunnel using the command line instead of Querious.
To create an SSH tunnel without Querious:
ssh -N username@serveraddress -L 8888:127.0.0.1:3306