cloudflared

Cloudflare doesn't really seem to care about their tunnel product. "cloudflared service install broken on macOS" since 2021: https://github.com/cloudflare/cloudflared/issues/327

I have a couple of thoughts on this blog post. #1. This blog post says that this product is launching in closed beta for "eligible Enterprise customers" only? But I thought cloudflare was moving away from enterprise gated features? Ref: https://blog.cloudflare.com/enterprise-grade-features-for-all/ #2. Will this feature finally allow me to tunnel my game server traffic through cloudflared to gain ddos protection and other features? Long ago "Cloudflare Spectrum" launched which is exact that feature but was for some reason priced obscenely and limited to enterprise only. Later "Cloudflare/Argo Tunnel" launched and it seems perfectly positioned to take over CF Spectrum's job but instead was, I think, intentionally limited to not allow tunneling UDP traffic as to not cannibalize Spectrum. Ref: https://github.com/cloudflare/cloudflar

This is one of the core usecases of cloudflared (https://github.com/cloudflare/cloudflared)! Without having a static IP address or dynamic DNS, you can establish a connection between your machine in a private network with Cloudflare. And once a resource is on the Cloudflare network, you can pretty much do anything with it, including routing your visitors to that server and using the full Cloudflare stack including its CDN, firewalls, and Anti-Bot protections.

I run a RaspberryPi 3 with FreeBSD 13 booting off an SD card and a USB SSD for storage [1]. Coincidentally today (1/7/2024) is its one year anniversary. It runs a jail with my single user GoToSocial ActivityPub server [2] reasonably well with cloudflared [3] handling incoming traffic and acting as CDN to take some of the load. Originally it was only using an SD card, but there was too much IO contention so a USB-SSD adapter is used to offload the IO. I choose FreeBSD over Linux since I have other Rpis with Linux already and wanted more experience with *BSD, jails, and ZFS. Unfortunately ZFS wasn't the best choice on an Rpi since it's more cpu intensive and switched back to UFS. Overall it's been solid, multiple GTS updates and have it on my list to update to FreedBSD 14 but not really in a rush. 1. https://social.ecliptik.com/@micheal/s

It's not an issue anymore. Your main concerns are power and internet stability. Plus, upload speed. The rest can be worked out. https://www.cloudflare.com/products/tunnel/ https://github.com/cloudflare/cloudflared https://developers.cloudflare.com/cloudflare-one/connections... Edit: If anyone is interested in self-hosting, it's stupid simple with cloudflared. I have a 2017 Google Pixelbook running Ubuntu on custom firmware that's serving a Flask-based website. It sits on my desk charging while connected to a guest wifi network. It receives a 100/100 Mobile PageSpeed score and takes 0.8 seconds to fully load.

An alternative to relying on your static IP (and all that comes with it, like needing a strong firewall and awareness/monitoring of activity there) would be to use the Cloudflared proxy/tunnel. https://github.com/cloudflare/cloudflared

Cloudflare already does this: https://github.com/cloudflare/cloudflared It works with all NATs/CGNATs by connecting from the pi over a bidirectional WS connection. PI <-> WS <-> Cloudflare. SSL is done on the cloud, not on the pi. Install any web server on the pi and "cloudflared" to proxy it. https://developers.cloudflare.com/cloudflare-one/connections...

For what it's worth I encountered the same issue and came up with a solution: https://github.com/cloudflare/cloudflared/issues/574 Cloudflare have ignored the github issue (which includes a solution) but at least 3 other people seem to have found my solution helpful.

> This is similar to installing something under /usr/sbin/ As someone who's trying to get to grips with the Linux filesystem conventions, would you mind elaborating on a) why that's wrong, and b) what you would suggest instead? This reference[0] suggests that `/usr/sbin` is for "general system-wide binaries with superuser (root) privileges required" (and `/usr/bin` for those that don't require root privileges). I've therefore been using them in my homelab for binaries like the Cloudflare Tunnel Client[1]. Where instead should I have installed it? * If to a "well-known location" that is commonly-used by convention, how should I find out what that is? * If to a custom location of my choosing, how should I communicate its location to scripts/tools that _use_ that binary? I see later in your comment that you suggest "Add whatever folder to th

> Client source code is available but not FOSS. They recently changed that, may be I am missing something?: https://github.com/cloudflare/cloudflared/blob/master/LICENS...

Unfortunately the cloudflared software, while the source is available on GitHub, and there are pull requests open and accepted for it, is not under an open source license, and the license it is under does not allow modifications, so any modifications (including the aformentioned pull requests) are contrary to the license and thus copyright law and thus illegal. The issue I filed about this is still waiting for action since October 2021. https://github.com/cloudflare/cloudflared/issues/464

I've just spent a few hours trying to use Cloudflare Tunnels to connect to my machine through SSH after reading this post. Unfortunately, I then found that SSH keys are not supported: https://github.com/cloudflare/cloudflared/issues/319 so I cannot disable Password authentication.