cloudflared

Login to Cloudflare

$ cloudflared tunnel login

$ cloudflared tunnel create [tunnel-name]

$ cloudflared tunnel list

$ cloudflared tunnel run [tunnel-name]

$ cloudflared tunnel route dns [tunnel-name] [hostname]

$ cloudflared tunnel --url http://localhost:[8080]

$ cloudflared tunnel delete [tunnel-name]

cloudflared tunnel command [options]
cloudflared access command [options]

cloudflared is the Cloudflare Tunnel client that creates secure, outbound-only connections from your origin server to Cloudflare's global network. This eliminates the need to expose public IP addresses or open inbound firewall ports, as all traffic is routed through Cloudflare's edge.
The tool supports tunneling HTTP, SSH, RDP, and arbitrary TCP protocols. Named tunnels provide persistent configurations, while quick tunnels offer temporary public URLs for development and testing. Tunnels can be configured to route traffic based on hostname and path rules defined in a YAML configuration file.
cloudflared also provides Cloudflare Access integration for authenticating users before they reach your origin, and can run as a system service for production deployments.

--url url

Local service URL

Public hostname

Configuration file path

Tunnel credentials

Origin certificate path

Disable auto-updates

~/.cloudflared/config.yml

Main tunnel configuration defining tunnel ID, credentials path, and ingress routing rules.

Origin certificate obtained during `cloudflared tunnel login`, used to authenticate tunnel creation.

login

Authenticate with Cloudflare

Create new tunnel

Start tunnel

List all tunnels

Remove tunnel

Configure routing

Show tunnel details

Delete stale connections

Tunnel credentials are per-tunnel. Quick tunnels are temporary. Free tier available. Previously called Argo Tunnel.

ngrok(1), ssh(1)