Browser-rendered terminal

Cloudflare can render certain non-web applications in your browser without the need for client software or end-user configuration changes. Cloudflare currently supports rendering a terminal for SSH and VNC connections in a user's browser.

Note

You can only enable browser rendering on domains and subdomains, not for specific paths.

Enable browser rendering

To enable browser rendering:

1. In Zero Trust ↗, go to Access > Applications.

2. Locate the SSH or VNC application you created when connecting the server to Cloudflare. Select Configure.

3. In the Policies tab, ensure that only Allow or Block policies are present. Bypass and Service Auth are not supported for browser-rendered applications.

4. Go to Advanced settings > Browser rendering settings.

5. For Browser rendering, choose SSH or VNC.

   Note

   When connecting over SSH, Cloudflare supports following key exchange algorithms:

   • curve25519-sha256@libssh.org
   • curve25519-sha256
   • ecdh-sha2-nistp256
   • ecdh-sha2-nistp384
   • ecdh-sha2-nistp521

6. Select Save application.

When users authenticate and visit the URL of the application, Cloudflare will render a terminal in their browser.