I finally understand Cloudflare Zero Trust tunnels
I finally understand Cloudflare Zero Trust tunnels
david.coffee
I finally understand Cloudflare Zero Trust tunnels
Everything you wanted to know about using Cloudflare Zero Trust Argo tunnels for your personal network. For those like me who were still confused even after reading the article, I think this is the lowdown:
- ZT tunnels let you expose private resources/services to the internet (or your users) via Cloudflare’s edge network. You install cloudflared on an internal host, and register a “tunnel” so that requests to a hostname or IP get forwarded securely into your network (similar to tailscale).
- Unlike classic VPNs (which open full network access) or traditional Cloudflare tunnels (which merely publish a service), this approach adds granular access control; you can define exactly who can access which resource, based on identity, device posture, login method, etc.
- It also solves NAT/firewall issues often faced by P2P-based overlays (e.g., Tailscale) by routing everything through Cloudflare’s network, avoiding connectivity failures when peer-to-peer fails.
For in-browser auth you can then use Cloudflare Access, or you can install the cloudflare Warp client which is a VPN-like thing that would give you full control over the access to whatever service(s) you were exposing this way.
I don't trust cloudflare, especially not with stuff like zero trust. They're a terrible company and I think they should fail.
Would you be willing to share more about your position? I’ve been happy with their service, but want to be fully informed about who I’m doing business with
They're protecting scammers and other bad actors, their infra is run by junior DevOps "engineers" and every now and then they find another way to fuck half the internet.
They're part of what's wrong with USA-centric hosting nowadays.
Others posted good articles and thoughts aswell :)
This read is a good start:
https://xn--gckvb8fzb.com/thoughts-on-cloudflare/
Could start with the fact that they go down about once a month now and take half the Internet with them.
It seems you're right
Hahhahaha 😄
Tbf, I dont this Argo Tunnel has anything to do with zero trust. The product has just been nested under that umbrella.