BDrive: A Multi-User Business Cloud Drive Running on the Cloudflare Edge Network

What Kind of Project Is This?

BDrive is a multi-user business cloud storage system built on the full Cloudflare stack (Workers + D1 + R2): files live in R2 object storage, metadata in a D1 database, and the application logic runs on edge nodes around the globe. It doesn't rely on a single traditional server — no data center, no bandwidth bills, no single point of failure — and it comes with CDN-grade speed and elasticity by design.

The target scenario is equally clear: business professionals and small teams need a drive that can collect payments, share files, and embed into their own workflows — not yet another personal sync folder.

Large-File Uploads: Chunked Direct Upload, Membership Perks Intact

Many self-hosted drives get stuck on platform-level request size limits when uploading big files. BDrive implements full chunked uploading: files over 32MB are automatically split into 8MB chunks uploaded one by one, with automatic retry on per-chunk failure; once the upload finishes, the server merges the chunks and re-validates size and quota. The progress bar is fully transparent to users, so a dropped connection mid-upload is nothing to panic about. Small files keep the simple single-request direct upload.

The download side is just as polished: fully streaming with no memory footprint, and HTTP Range support for video and audio — seeking the progress bar and resuming interrupted downloads are native experiences.

Sharing and Direct Links: Two Ways to Deliver Files

Share links are built for business delivery: optional extraction codes, expiry dates and download limits; folders can be browsed and downloaded as a whole package; recipients need no registration and see no ads, and every share comes with a short link (/s/xxx) that drops neatly into a chat window.

Signed direct links serve more technical use cases — the feature I find most interesting. Any file can generate a login-free direct link like /f/7/my-video.mp4?exp=…&sig=…:

• The URL ends with the real filename and extension, so it can be embedded into third-party platforms or pasted into a player, and the browser plays it right away (inline + Range);
• Links are protected by an HMAC-SHA256 signature, with four expiry options — 1 hour / 24 hours / 7 days / permanent — and permanent links can be revoked with one click (the signature material is bound to the file's version number, so revocation takes effect immediately);
• Append &dl=1 to force a download; executable markup types such as HTML/SVG are always served as attachments, so the drive can't be abused as a hosting page.

AI Workbench: The Drive Grows a Brain

AI Q&A: pick any folder in the web UI and the AI automatically extracts the directory tree and the contents of text files as context. You can then ask follow-up questions across multiple turns — "summarize the proposals in this folder", "find the highest quote". Model configuration is fully bring-your-own (any OpenAI-compatible service: just fill in Base URL / model ID / API key). Keys are stored encrypted with AES-GCM and never sent back to the frontend, and outbound addresses are guarded against SSRF (private, loopback and reserved ranges are rejected).

Open drive API: going one step further, every user can create their own drive API keys (read-only or read-write). Any AI Agent with just an "endpoint + key" can operate the drive through /api/v1 — browsing directory trees, searching, downloading file contents; read-write keys can also upload, rename, move and delete. The API ships with a machine-readable capability manifest (so agents can self-discover) and a human-readable documentation page — plug-and-play with Claude, MCP tools, or any automation script. All data is strictly scoped to the key owner's account; key plaintext is shown only once at creation and can be revoked at any time.

Membership and Payments

Plans support monthly, quarterly and yearly billing, with perks such as storage space and per-file size limits; expired memberships get a grace period with countdown reminder emails, automatic cleanup when the grace period ends (configurable), and instant restoration upon renewal. Payments follow the standard epay protocol, with WeChat Pay, Alipay, e-CNY and USDT as four independently toggleable channels. Callbacks verify both signature and amount, and order fulfillment uses conditional updates to guarantee idempotency.

Admin Dashboard

Administrators get a complete back office: a data dashboard, user management (ban/unban, manual quota overrides, membership adjustments, password resets), plan CRUD, order lookup, file and share governance, site settings and payment channel configuration. All sensitive operations sit behind session auth and admin middleware.

A Few Security Details

• Passwords hashed with PBKDF2-SHA256 at 100,000 iterations; sessions use JWT + HttpOnly cookies
• API keys are stored only as SHA-256 hashes and compared in constant time to prevent timing side channels
• Direct-link signature checks are constant-time too; AI model endpoints go through outbound allowlist validation
• Global nosniff, X-Frame-Options and Referrer-Policy response headers
• Quota is pre-checked before upload and re-verified after merge — double gatekeeping

Tech Stack at a Glance

The whole system runs without a single server to maintain — deployment is one wrangler deploy, and upgrades feel as light as shipping a release.

That's BDrive: a multi-user business cloud drive that packs storage, sharing, delivery and AI into edge computing. Uploads and downloads are fast, sharing is presentable and controllable, and AI Agents can organize and move your files for you — and all of it runs on that planet-wide network called Cloudflare.