# Cloudflared Cloudflared is the official command-line client for Cloudflare Tunnel, a tunneling daemon that proxies traffic from the Cloudflare network to your local origin servers. It is open source and self-hosted, installable on ZimaOS, Docker Hub, Kubernetes (Helm), Proxmox, TrueNAS and Unraid. Canonical page: https://ourlocalhost.com/app/335/cloudflared ## Description Cloudflared is the official command-line client for Cloudflare Tunnel, a tunneling daemon that proxies traffic from the Cloudflare network to your local origin servers. It lets you publish local services without opening inbound firewall ports, making it a practical choice for self-hosters who want secure, low-maintenance remote access. ## Platform availability Available on 7 of 9 platforms: Unraid, TrueNAS, ZimaOS, Proxmox, Helm, Mac, Windows. ## Desktop and other devices Mac, Windows. ## Health score 84/100 (Excellent), based on 4 of 4 factors. - Maintained: 100 (last commit 25 days ago) - Popular: 84 (15,953 GitHub stars) - Easy to install: 85 (7 install platforms, install notes, Docker image) - Light to run: 40 (4 GB minimum RAM, runs on ARM) ## Links - ZimaOS: https://github.com/IceWhaleTech/CasaOS-AppStore/tree/main/Apps/Cloudflared - Docker Hub: https://hub.docker.com/r/cloudflare/cloudflared/ - Official website: https://developers.cloudflare.com - Documentation: https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-tunnel - desktop: https://github.com/cloudflare/cloudflared/releases/latest - Kubernetes (Helm): https://artifacthub.io/packages/helm/community-charts/cloudflared - Proxmox: https://community-scripts.github.io/ProxmoxVE/scripts?id=cloudflared - TrueNAS: https://apps.truenas.com/catalog/cloudflared/ - Unraid: https://ca.unraid.net/apps/cloudflared-1losovh07cb8nl?q=cloudflared - GitHub: https://github.com/cloudflare/cloudflared ## Common questions ### Do I need to log in before starting a Cloudflare Tunnel? Yes. Run cloudflared login or set up a tunnel token first so the daemon can prove it is allowed to connect to your Cloudflare account. Without that credential, the tunnel may start but may not connect your local services safely. ### What should I do if cloudflared starts but prints config warnings? Check the warnings because they often point to a missing or incorrect setting. An unnoticed config problem can stop traffic from reaching the intended origin. ### How can I tell whether my cloudflared tunnel is actually connected? Use cloudflared tunnel info after starting it. That shows whether the local connector is connected and helps separate a broken website from an unconnected tunnel. ### Why is my app reachable with localhost locally but not through cloudflared in Docker? If the service is on the Docker host, use the Docker host IP address instead of localhost in the tunnel origin. localhost inside the container points to the container, not the host. ### Can cloudflared be used for non-HTTP services such as SSH? Yes, cloudflared access can reach tunnel-protected origins for Layer 4 TCP traffic, including SSH or RDP. WARP can also access private origins behind tunnels for Layer 4 traffic without running cloudflared access on the client. ## Alternatives - Amazon Web Services: A pay-as-you-go cloud computing platform with services in networking, compute, storage, and IoT, accessible via global server farms. - Anubis: Anubis is a lightweight, self-hosted web firewall that weighs each incoming connection with a proof-of-work challenge before it reaches you… - BunkerWeb: BunkerWeb is a self-hosted, open-source web application firewall and NGINX-based web server that protects services with secure-by-default s… - Cisco Umbrella: Cisco Umbrella (formerly OpenDNS) provides the first line of defense against threats on the internet wherever users go. - CrowdSec: CrowdSec is a free, open-source IDS/IPS and WAF that detects malicious behavior by analyzing server logs and HTTP requests, then blocks off… - DeCDN Node: deCDN Node is the daemon that runs a deCDN cache node — bond funds, serve cached content, and get paid per megabyte — deployed on Kubernete… - DigitalOcean: Cloud computing platform with Droplets for virtual servers, managed Kubernetes, spaces for storage, and managed databases aiming at develop… - Duck DNS: Free dynamic DNS hosted on Amazon VPC. - Fly.io: Edge computing is the new frontier. - Haproxy: HAProxy is a TCP proxy and a HTTP reverse proxy. - Sucuri --- Source: Our Local Host (https://ourlocalhost.com/app/335/cloudflared), the self-hosted and open-source app directory.