SSH over port 443

Use the endpoint returned by the API, the required protocol and a current authorization. A connected socket is not an indefinite grant.

Upgrade and close behavior

Before a WebSocket is accepted, failures return the declared RFC 9457 HTTP problem (401, 403, 404, 409, 429 or 503) with CE-Request-Id and the RateLimit headers; a refusal before the request is forwarded also carries CE-Not-Forwarded and, for 429 and 503, Retry-After. After acceptance, close code 1000 means a normal exit or deletion by the session owner, 4008 idle, 4001 authorization ended (expiry or revocation; reconnect with fresh authority), 1008 a protocol violation and 4009 a human-in-control conflict. Malformed upgrade input is a 400 validation error.

Wire behavior

Raw bytes in binary frames, bridged to the guest's sshd on port 22. SSH authentication and host-key checks run end to end; the tunnel carries only SSH. The SSH WebSocket requires an exec access token in Authorization; query-token and session-secret authentication are unsupported.

Dory is in development; these pages describe the planned service and may change. Questions: support@computeengines.com.