newbietan/CloudSSH

What it solves

CloudSSH provides a way to connect to and manage remote servers via a web browser without needing to install a local SSH client. It eliminates the need for a dedicated backend server by leveraging serverless infrastructure, reducing costs and setup complexity for users who need remote access from any device.

How it works

The project is built on Cloudflare Workers and utilizes Cloudflare's TCP Sockets support to parse and forward the SSH protocol at the network edge. It implements a full SSH-2.0 protocol stack in pure TypeScript using the Web Crypto API for encryption.

Key architectural components include:

• Durable Objects: Used to manage independent terminal sessions and user data.
• WebSocket: Facilitates real-time I/O between the browser and the Worker.
• Edge Network: Ensures low-latency connections by routing traffic through the nearest Cloudflare data center.

Who it’s for

• System Administrators: Who need a lightweight, secure way to manage multiple servers from any browser.
• Developers: Who want a zero-cost, serverless deployment for their remote management tools.
• Power Users: Who require advanced features like SSH jump hosts (bastion servers) and SFTP file management via a web interface.

Highlights

• Full SSH-2.0 Implementation: A custom TypeScript protocol stack supporting multiple key exchange algorithms and authentication methods (password, private keys, keyboard-interactive).
• SFTP Integration: A graphical file manager for browsing, uploading, downloading, and editing remote files using CodeMirror.
• SSH Jump Hosts: Support for up to 3 levels of nested SSH tunnels to reach internal network servers.
• AI Agent Assistant: A side-panel AI assistant (BYOK) that can analyze terminal errors, manage Docker containers, and execute system commands.
• Security Features: Implements TOFU (Trust On First Use) host key verification, AES-256-GCM encrypted credential storage, and optional Cloudflare Turnstile CAPTCHA.
• Serverless Deployment: One-click deployment via GitHub to Cloudflare Workers with zero server maintenance costs.