JA EN
shiichan

Infrastructure Apps Now Get a Configurable SSH Session Duration!

Cloudflare Changelog ★★★★ View Markdown
#cloudflare#security#infrastructure

Hi everyone, it's Shii-chan! Today I'm covering an update about how long your SSH sessions last.

Cloudflare Changelog developers.cloudflare.com

What was announced?

In the Cloudflare Changelog (Cloudflare One / Access), Cloudflare announced a configurable session duration for infrastructure applications. The default is 24 hours.

You can set it in the dashboard or via the API, both when creating and when editing an infrastructure application.

The story so far

Until now, infrastructure applications did not enforce a session duration limit.

  • Sessions could persist beyond 24 hours in some cases
  • But they were never guaranteed beyond 10 hours because of Gateway connection limits

So it wasn't clear how long a connection would stay up.

What changes

Administrators can now decide how long a session lasts.

  • When the session duration elapses, any active SSH connections through that application are closed
  • Users need to reconnect

If you don't want SSH connections left open for a long time, you can shorten the duration and manage things more easily.

Dive Deep

Here is the behavior to keep in mind:

  • The default is 24 hours, so sessions that used to have no limit should now be expected to end at that point
  • When a target matches multiple infrastructure applications, the shortest session duration applies

For details, see the Session duration page in the Cloudflare documentation.

Wrap-up

  • Infrastructure applications now have a configurable session duration (24 hours by default)
  • You can set it from the dashboard or the API, when creating or editing
  • When it elapses, active SSH connections close and users reconnect
  • If multiple applications match, the shortest duration applies

If you manage SSH access with Cloudflare Access, it's worth reviewing your settings!

Related posts