Show HN: A Serverless Web SSH Terminal on Cloudflare Workers — with AI Assistant, File Manager, and Multi-Session Tabs

[newbietan]

Features

• Serverless Web SSH terminal built on Cloudflare Workers + Durable Objects + TCP Sockets — zero server maintenance required
• Native TypeScript implementation of the SSH-2.0 protocol, supporting Curve25519-SHA256 / ECDH-SHA2-NISTP256 key exchange, AES-256-GCM / AES-CTR multi-mode encryption, and HMAC-SHA2 integrity verification
• Dual authentication methods — password-based authentication and Ed25519 private key authentication
• IPv4 / IPv6 dual-stack connectivity with automatic IPv6 bracket notation handling
• Built-in AI Agent system — integrates with OpenAI-compatible LLMs (OpenAI / DeepSeek / Qwen / Kimi, etc.), enabling conversational server management from a side panel, automatic command execution, and terminal context awareness, with human confirmation required for destructive operations
• Built-in SFTP file manager — dual-pane browsing, drag-and-drop upload, chunked concurrent transfers (128KB × 8 concurrency), download/upload queue management, progress tracking, and cancellation support, with a maximum single file size of 500MB
• Integrated trzsz protocol for terminal-channel file transfers — drag files directly into the terminal to upload, works in conjunction with remote trz/tsz commands
• Multi-tab session management — connect to multiple servers simultaneously, with independent terminal / SFTP / Agent instances per tab and real-time connection status indicators
• Host key fingerprint verification (TOFU) — fingerprints are recorded on first connection and automatically verified on subsequent connections, with man-in-the-middle attack warnings when anomalies are detected
• Server management panel — authenticated users can save server configurations, with credentials encrypted using AES-256-GCM (PBKDF2 key derivation)
• Cyberpunk-style UI with three built-in themes (Cyberpunk / Glacier / Gruvbox), plus support for custom JSON theme import and cloud synchronization
• xterm.js + WebGL hardware-accelerated rendering, with built-in terminal text search (Ctrl+Shift+F) and clickable URL detection
• Built-in security hardening — SSRF protection (private network ranges / cloud metadata endpoint interception), API rate limiting, Cloudflare Turnstile human verification, and cross-site WebSocket hijacking protection
• GitHub OAuth one-click login — anonymous mode also available for direct connection without authentication
• Encrypted client-side connection history (AES-256-GCM + PBKDF2) with quick reconnect support for the 5 most recent connections
• Standalone tab mode — embeddable into third-party pages via URL parameters

---

Use Cases

• Remote server management and day-to-day operations
• AI-assisted operations — describe requirements in natural language, and the Agent automatically executes commands and reports results
• In-browser file management — use the SFTP panel or trzsz drag-and-drop transfers without any additional client software
• Emergency SSH access from devices without a native SSH client (hotel, internet café, public computers)
• Lightweight terminal access from mobile devices
• Parallel multi-server operations with quick tab switching
• Embedding into internal management platforms (standalone tab mode + WebSocket URL parameters)

---

Live Demo

• Production — https://ssh.newbietan.cn
• Staging (latest features deployed first) — https://sshtest.newbietan.cn

---

Repository

https://github.com/newbietan/CloudSSH