Sen descrición

Sudarsan Reddy c9af4670ef Release 2022.6.3 %!s(int64=3) %!d(string=hai) anos
.github 337591b2bb TUN-6414: Remove go-sumtype from cloudflared build process %!s(int64=3) %!d(string=hai) anos
.mac_resources 0c65daaa7d AUTH-2712 mac package build script and better config file handling when started as a service %!s(int64=5) %!d(string=hai) anos
.teamcity f7fd4ea71c TUN-6197: Publish to brew core should not try to open the browser %!s(int64=3) %!d(string=hai) anos
carrier 636ec75010 carrier: fix dropped errors %!s(int64=3) %!d(string=hai) anos
certutil 197a70c9c4 Fix typos %!s(int64=4) %!d(string=hai) anos
cfapi 98736a03e1 TUN-5915: New cloudflared command to allow to retrieve the token credentials for a Tunnel %!s(int64=3) %!d(string=hai) anos
cfio d1a4710aa2 TUN-6035: Reduce buffer size when proxying data %!s(int64=3) %!d(string=hai) anos
cmd ee87c43eb9 Merge pull request #656 from nikr-canva/http2-origins %!s(int64=3) %!d(string=hai) anos
component-tests ab81ff8bfb Revert "TUN-6010: Add component tests for --edge-ip-version" %!s(int64=3) %!d(string=hai) anos
config ee87c43eb9 Merge pull request #656 from nikr-canva/http2-origins %!s(int64=3) %!d(string=hai) anos
connection 3da1c25471 TUN-6381: Write error data on QUIC stream when we fail to talk to the origin; separate logging for protocol errors vs. origin errors. %!s(int64=3) %!d(string=hai) anos
datagramsession b8ba5b444c TUN-6301: Allow to update logger used by UDP session manager %!s(int64=3) %!d(string=hai) anos
edgediscovery 1d79831651 Revert "TUN-6007: Implement new edge discovery algorithm" %!s(int64=3) %!d(string=hai) anos
fips d83d6d54ed TUN-3905: Cannot run go mod vendor in cloudflared due to fips %!s(int64=4) %!d(string=hai) anos
h2mux 70e675f42c TUN-5551: Reintroduce FIPS compliance for linux amd64 now as separate binaries %!s(int64=3) %!d(string=hai) anos
hello cbdf88ea28 TUN-5164: Update README and clean up references to Argo Tunnel (using Cloudflare Tunnel instead) %!s(int64=4) %!d(string=hai) anos
ingress ee87c43eb9 Merge pull request #656 from nikr-canva/http2-origins %!s(int64=3) %!d(string=hai) anos
ipaccess 99d4e48656 TUN-6016: Push local managed tunnels configuration to the edge %!s(int64=3) %!d(string=hai) anos
logger da4d0b2bae TUN-4067: Reformat code for consistent import order, grouping, and fix formatting. Added goimports target to the Makefile to make this easier in the future. %!s(int64=4) %!d(string=hai) anos
metrics e3aad7799e TUN-6357: Add connector id to ready check endpoint %!s(int64=3) %!d(string=hai) anos
orchestration f2339a7244 TUN-6380: Enforce connect and keep-alive timeouts for TCP connections in both WARP routing and websocket based TCP proxy. %!s(int64=3) %!d(string=hai) anos
overwatch 2f70b05c64 AUTH-2169 make access login page more generic %!s(int64=5) %!d(string=hai) anos
proxy f2339a7244 TUN-6380: Enforce connect and keep-alive timeouts for TCP connections in both WARP routing and websocket based TCP proxy. %!s(int64=3) %!d(string=hai) anos
quic 3da1c25471 TUN-6381: Write error data on QUIC stream when we fail to talk to the origin; separate logging for protocol errors vs. origin errors. %!s(int64=3) %!d(string=hai) anos
retry 8ca0d86c85 TUN-3863: Consolidate header handling logic in the connection package; move headers definitions from h2mux to packages that manage them; cleanup header conversions %!s(int64=4) %!d(string=hai) anos
signal 073c5bfdaa TUN-1562: Refactor connectedSignal to be safe to close multiple times %!s(int64=6) %!d(string=hai) anos
socks 197a70c9c4 Fix typos %!s(int64=4) %!d(string=hai) anos
ssh_server_tests 197a70c9c4 Fix typos %!s(int64=4) %!d(string=hai) anos
sshgen 9422ea8ed8 CC-796: Remove dependency on unsupported version of go-oidc %!s(int64=3) %!d(string=hai) anos
supervisor 1d79831651 Revert "TUN-6007: Implement new edge discovery algorithm" %!s(int64=3) %!d(string=hai) anos
tlsconfig 5f380f3a54 TUN-5612: Make tls min/max version public visible %!s(int64=3) %!d(string=hai) anos
token 9422ea8ed8 CC-796: Remove dependency on unsupported version of go-oidc %!s(int64=3) %!d(string=hai) anos
tracing 6f78ccde04 TUN-6250: Add upstream response status code to tracing span attributes %!s(int64=3) %!d(string=hai) anos
tunneldns 8a5343d0a5 TUN-5675: Remove github.com/dgrijalva/jwt-go dependency by upgrading coredns version %!s(int64=3) %!d(string=hai) anos
tunnelrpc 99d4e48656 TUN-6016: Push local managed tunnels configuration to the edge %!s(int64=3) %!d(string=hai) anos
tunnelstate 1ee540a166 TUN-5368: Log connection issues with LogLevel that depends on tunnel state %!s(int64=4) %!d(string=hai) anos
validation cbdf88ea28 TUN-5164: Update README and clean up references to Argo Tunnel (using Cloudflare Tunnel instead) %!s(int64=4) %!d(string=hai) anos
vendor 475939a77f TUN-6191: Update quic-go to v0.27.1 and with custom patch to allow keep alive period to be configurable %!s(int64=3) %!d(string=hai) anos
watcher 70e675f42c TUN-5551: Reintroduce FIPS compliance for linux amd64 now as separate binaries %!s(int64=3) %!d(string=hai) anos
websocket d1a4710aa2 TUN-6035: Reduce buffer size when proxying data %!s(int64=3) %!d(string=hai) anos
.docker-images d433a0fa54 TUN-4130: cloudflared docker images now have a latest tag %!s(int64=3) %!d(string=hai) anos
.dockerignore d54c8cc745 TUN-5129: Use go 1.17 and copy .git folder to docker build to compute version %!s(int64=4) %!d(string=hai) anos
.gitignore 9552bb7bc7 TUN-5853 Add "install" make target and build package manager info into executable %!s(int64=3) %!d(string=hai) anos
CHANGES.md c5d1662244 TUN-5960: Do not log the tunnel token or json credentials %!s(int64=3) %!d(string=hai) anos
Dockerfile 056693c814 Add image source label to docker container. %!s(int64=3) %!d(string=hai) anos
LICENSE c54e8cd8e6 TUN-5851: Update all references to point to Apache License 2.0 %!s(int64=3) %!d(string=hai) anos
Makefile 135c8e6d13 TUN-6362: Add armhf support to cloudflare packaging %!s(int64=3) %!d(string=hai) anos
README.md f758361730 Warp Private Network link updated %!s(int64=3) %!d(string=hai) anos
RELEASE_NOTES 6a6ba704f1 Release 2022.6.3 %!s(int64=3) %!d(string=hai) anos
build-packages-fips.sh 70e675f42c TUN-5551: Reintroduce FIPS compliance for linux amd64 now as separate binaries %!s(int64=3) %!d(string=hai) anos
build-packages.sh 135c8e6d13 TUN-6362: Add armhf support to cloudflare packaging %!s(int64=3) %!d(string=hai) anos
cfsetup.yaml 337591b2bb TUN-6414: Remove go-sumtype from cloudflared build process %!s(int64=3) %!d(string=hai) anos
check-fips.sh 70e675f42c TUN-5551: Reintroduce FIPS compliance for linux amd64 now as separate binaries %!s(int64=3) %!d(string=hai) anos
cloudflared.wxs ca85df10ff TUN-4911: Append Environment variable to Path instead of overwriting it %!s(int64=4) %!d(string=hai) anos
cloudflared_man_template 1ed9e0fceb AUTH-2644: Change install location and add man page %!s(int64=5) %!d(string=hai) anos
dev.Dockerfile 7bc2462e36 TUN-6282: Upgrade golang to 1.17.10, go-boring to 1.17.9 %!s(int64=3) %!d(string=hai) anos
fmt-check.sh da4d0b2bae TUN-4067: Reformat code for consistent import order, grouping, and fix formatting. Added goimports target to the Makefile to make this easier in the future. %!s(int64=4) %!d(string=hai) anos
github_message.py d21989dba4 AUTH-3148 fixed cloudflared copy and match all the files in the checksum upload %!s(int64=5) %!d(string=hai) anos
github_release.py 197a70c9c4 Fix typos %!s(int64=4) %!d(string=hai) anos
go.mod 475939a77f TUN-6191: Update quic-go to v0.27.1 and with custom patch to allow keep alive period to be configurable %!s(int64=3) %!d(string=hai) anos
go.sum 475939a77f TUN-6191: Update quic-go to v0.27.1 and with custom patch to allow keep alive period to be configurable %!s(int64=3) %!d(string=hai) anos
jet.yaml cbdf88ea28 TUN-5164: Update README and clean up references to Argo Tunnel (using Cloudflare Tunnel instead) %!s(int64=4) %!d(string=hai) anos
postinst.sh 28d556b8d4 AUTH-2858: Set file to disable autoupdate %!s(int64=5) %!d(string=hai) anos
postrm.sh 28d556b8d4 AUTH-2858: Set file to disable autoupdate %!s(int64=5) %!d(string=hai) anos
release_pkgs.py 135c8e6d13 TUN-6362: Add armhf support to cloudflare packaging %!s(int64=3) %!d(string=hai) anos
wix.json 0c65daaa7d AUTH-2712 mac package build script and better config file handling when started as a service %!s(int64=5) %!d(string=hai) anos

README.md

Cloudflare Tunnel client

Contains the command-line client for Cloudflare Tunnel, a tunneling daemon that proxies traffic from the Cloudflare network to your origins. This daemon sits between Cloudflare network and your origin (e.g. a webserver). Cloudflare attracts client requests and sends them to you via this daemon, without requiring you to poke holes on your firewall --- your origin can remain as closed as possible. Extensive documentation can be found in the Cloudflare Tunnel section of the Cloudflare Docs. All usages related with proxying to your origins are available under cloudflared tunnel help.

You can also use cloudflared to access Tunnel origins (that are protected with cloudflared tunnel) for TCP traffic at Layer 4 (i.e., not HTTP/websocket), which is relevant for use cases such as SSH, RDP, etc. Such usages are available under cloudflared access help.

You can instead use WARP client to access private origins behind Tunnels for Layer 4 traffic without requiring cloudflared access commands on the client side.

Before you get started

Before you use Cloudflare Tunnel, you'll need to complete a few steps in the Cloudflare dashboard: you need to add a website to your Cloudflare account. Note that today it is possible to use Tunnel without a website (e.g. for private routing), but for legacy reasons this requirement is still necessary:

  1. Add a website to Cloudflare
  2. Change your domain nameservers to Cloudflare

Installing cloudflared

Downloads are available as standalone binaries, a Docker image, and Debian, RPM, and Homebrew packages. You can also find releases here on the cloudflared GitHub repository.

User documentation for Cloudflare Tunnel can be found at https://developers.cloudflare.com/cloudflare-one/connections/connect-apps

Creating Tunnels and routing traffic

Once installed, you can authenticate cloudflared into your Cloudflare account and begin creating Tunnels to serve traffic to your origins.

TryCloudflare

Want to test Cloudflare Tunnel before adding a website to Cloudflare? You can do so with TryCloudflare using the documentation available here.

Deprecated versions

Cloudflare currently supports versions of cloudflared 2020.5.1 and later. Breaking changes unrelated to feature availability may be introduced that will impact versions released prior to 2020.5.1. You can read more about upgrading cloudflared in our developer documentation.

Version(s) Deprecation status
2020.5.1 and later Supported
Versions prior to 2020.5.1 No longer supported