SSH through Wrangler enabled by default for Containers
Key Points
- SSH via wrangler enabled by default
- No public container ports exposed
- Requires authorized_keys public key
Summary
SSH access to Cloudflare Containers is now enabled by default and reachable only via the Wrangler CLI. You no longer need to set ssh.enabled to true manually. This does not open any public container ports — the connection is tunneled and authenticated through your Cloudflare account. You must add an ssh-ed25519 public key to the container's authorized_keys before anyone can connect.
Key Points
- Default:
wrangler containers ssh <INSTANCE_ID>works by default for Containers. - No public exposure: SSH is accessible only through Wrangler; no publicly accessible ports are opened.
- Authentication: Add an
ssh-ed25519public key toauthorized_keysinwrangler.jsoncorwrangler.tomlto grant access. - Disable: set
ssh.enabled = falsein your Container config to turn SSH off. - Config note: include
authorized_keysentries (withnameandpublic_key) under your container definition in wrangler.jsonc or wrangler.toml.
For full details and examples, see the Cloudflare SSH documentation.