An SSH tunnel account gives you a restricted Linux user that can only forward traffic — no shell, no sudo. Apps such as HTTP Injector, HTTP Custom and NetMod use these accounts to route your phone's traffic through the server, optionally wrapped in SSL (port 443) or WebSocket (port 80).
On a computer, a single ssh -D 1080 command turns the account into a SOCKS5 proxy for your browser.