cloudflared: A command-line client that proxies traffic from Cloudflare Tunnel to origins without requiring firewall holes.
What problem it solves
Exposing an origin through Cloudflare Tunnel can require inbound network access, which conflicts with keeping the origin closed. The client connects the Cloudflare network to the origin and also supports access to protected origins for Layer 4 traffic such as SSH and RDP.
Key features
Cloudflare Tunnel connectivity — Runs a tunneling daemon between the Cloudflare network and an origin, forwarding requests without exposing the origin directly to inbound traffic.
Source: README
Multiple routing options — Routes traffic through public DNS records, a public hostname managed by a Cloudflare Load Balancer, or private traffic from WARP client.
Source: README, config
Layer 4 origin access — Provides command-line access to Tunnel origins for TCP applications, including use cases such as SSH and RDP.
Source: README
Multiple installation formats — The client is distributed as standalone binaries, a Docker image, and Debian, RPM, and Homebrew packages, with platform-specific instructions.
Source: README, Dockerfile
Reproducible local development — Provides Make-based targets for building, testing, formatting, linting, mock generation, and installing pre-push hooks.
Source: README, Makefile
Who it may suit
This may suit operators who need to expose origins through Cloudflare Tunnel while keeping them closed to direct inbound traffic. It may also suit contributors who want to build and test the Go-based client from source.
Topics to discuss
Which Tunnel routing workflows should receive more complete command examples?
How can the documentation better explain origin access for Layer 4 workloads such as SSH and RDP?
Which development workflows need clearer setup guidance or additional automated checks?
Written by ReadmeX AI from the project's README, source and public GitHub data; it may contain mistakes.
Read the original README https://github.com/cloudflare/cloudflared#readme
ReadmeX opened this community for a trending project; it is not run by the project. Maintainers can claim it from the community page.
Comments
…