Go to file
cthuang eee0d57ed0 TUN-5849: Remove configuration debug log 2022-03-08 11:03:46 +00:00
.github Update issue templates 2022-02-14 14:02:45 -06:00
.mac_resources
.teamcity
carrier Fix typos 2021-11-12 17:38:06 +02:00
certutil
cfapi TUN-5681: Add support for running tunnel using Token 2022-02-23 10:09:45 +00:00
cmd/cloudflared TUN-5679: Add support for service install using Tunnel Token 2022-03-03 18:59:03 +00:00
component-tests TUN-5680: Adapt component tests for new service install based on token 2022-03-03 19:18:59 +00:00
config
connection TUN-5849: Remove configuration debug log 2022-03-08 11:03:46 +00:00
datagramsession
edgediscovery
fips
h2mux
hello
ingress TUN-5737: Support https protocol over unix socket origin 2022-03-03 15:25:23 +00:00
ipaccess TUN-4017: Add support for using cloudflared as a full socks proxy. 2021-03-10 21:26:12 +00:00
logger
metrics
orchestration TUN-5837: Log panic recovery in http2 logic with debug level log 2022-03-04 11:52:45 +00:00
overwatch
proxy TUN-5836: QUIC transport no longer sets body to nil in any condition 2022-03-07 11:39:07 +00:00
quic TUN-5697: Listen for UpdateConfiguration RPC in quic transport 2022-02-18 09:12:39 +00:00
retry
signal
socks
ssh_server_tests
sshgen CC-796: Remove dependency on unsupported version of go-oidc 2022-03-07 21:48:30 +00:00
supervisor TUN-5698: Make ingress rules and warp routing dynamically configurable 2022-02-16 09:38:28 +00:00
tlsconfig
token CC-796: Remove dependency on unsupported version of go-oidc 2022-03-07 21:48:30 +00:00
tunneldns
tunnelrpc TUN-5697: Listen for UpdateConfiguration RPC in quic transport 2022-02-18 09:12:39 +00:00
tunnelstate
validation
vendor CC-796: Remove dependency on unsupported version of go-oidc 2022-03-07 21:48:30 +00:00
watcher
websocket TUN-5836: Avoid websocket#Stream function from crashing cloudflared with unexpected memory access 2022-03-04 18:42:41 +00:00
.docker-images
.dockerignore
.gitignore
CHANGES.md
Dockerfile
LICENSE TUN-5768: Update cloudflared license file 2022-02-15 10:15:52 +00:00
Makefile
README.md
RELEASE_NOTES Release 2022.3.1 2022-03-07 15:16:47 +00:00
build-packages-fips.sh
build-packages.sh
cfsetup.yaml
check-fips.sh
cloudflared.wxs
cloudflared_man_template
dev.Dockerfile
fmt-check.sh
github_message.py AUTH-3148 fixed cloudflared copy and match all the files in the checksum upload 2020-10-06 11:39:40 -05:00
github_release.py
go.mod CC-796: Remove dependency on unsupported version of go-oidc 2022-03-07 21:48:30 +00:00
go.sum CC-796: Remove dependency on unsupported version of go-oidc 2022-03-07 21:48:30 +00:00
jet.yaml
postinst.sh
postrm.sh
wix.json

README.md

Cloudflare Tunnel client

Contains the command-line client for Cloudflare Tunnel, a tunneling daemon that proxies traffic from the Cloudflare network to your origins. This daemon sits between Cloudflare network and your origin (e.g. a webserver). Cloudflare attracts client requests and sends them to you via this daemon, without requiring you to poke holes on your firewall --- your origin can remain as closed as possible. Extensive documentation can be found in the Cloudflare Tunnel section of the Cloudflare Docs. All usages related with proxying to your origins are available under cloudflared tunnel help.

You can also use cloudflared to access Tunnel origins (that are protected with cloudflared tunnel) for TCP traffic at Layer 4 (i.e., not HTTP/websocket), which is relevant for use cases such as SSH, RDP, etc. Such usages are available under cloudflared access help.

You can instead use WARP client to access private origins behind Tunnels for Layer 4 traffic without requiring cloudflared access commands on the client side.

Before you get started

Before you use Cloudflare Tunnel, you'll need to complete a few steps in the Cloudflare dashboard: you need to add a website to your Cloudflare account. Note that today it is possible to use Tunnel without a website (e.g. for private routing), but for legacy reasons this requirement is still necessary:

  1. Add a website to Cloudflare
  2. Change your domain nameservers to Cloudflare

Installing cloudflared

Downloads are available as standalone binaries, a Docker image, and Debian, RPM, and Homebrew packages. You can also find releases here on the cloudflared GitHub repository.

User documentation for Cloudflare Tunnel can be found at https://developers.cloudflare.com/cloudflare-one/connections/connect-apps

Creating Tunnels and routing traffic

Once installed, you can authenticate cloudflared into your Cloudflare account and begin creating Tunnels to serve traffic to your origins.

TryCloudflare

Want to test Cloudflare Tunnel before adding a website to Cloudflare? You can do so with TryCloudflare using the documentation available here.

Deprecated versions

Cloudflare currently supports versions of cloudflared 2020.5.1 and later. Breaking changes unrelated to feature availability may be introduced that will impact versions released prior to 2020.5.1. You can read more about upgrading cloudflared in our developer documentation.

Version(s) Deprecation status
2020.5.1 and later Supported
Versions prior to 2020.5.1 No longer supported