Skip to content
O/THE OPEN ALTERNATIVE
↑↓to navigate↵to selectescto close
Cloudflare Tunnel

Cloudflare Tunnel

Post-quantum encrypted tunnels to connect origin servers, APIs, and services to Cloudflare's global network without exposing public IPs. Includes CDN caching, WAF, and DDoS protection.

Cloudflare Tunnel is an open-source alternative to:

Cloudflare Tunnel preview

Cloudflare Tunnel securely connects your origin servers, APIs, and services to Cloudflare's global network using post-quantum encrypted tunnels. Instead of exposing public IPs, you install a lightweight daemon called cloudflared on your server to create a persistent outbound-only connection.

Key Features

  • Post-quantum encryption: Secure tunnels with advanced cryptography resistant to quantum computing threats.
  • No public IPs required: Eliminates the need for exposing server IP addresses to the internet.
  • CDN integration: Leverage Cloudflare's global CDN for caching and performance optimization.
  • WAF & DDoS protection: Built-in Web Application Firewall and Distributed Denial of Service mitigation.
  • Bot management: Advanced bot detection and mitigation to protect your services.
  • Granular permissions: Fine-grained access control for tunnel management.
  • Multi-platform support: Works with Linux, macOS, Windows, Kubernetes, and cloud providers (AWS, Azure, GCP).
  • Monitoring & analytics: Real-time insights into tunnel performance and traffic.
  • Zero Trust integration: Seamless compatibility with Cloudflare's Zero Trust security model.

Tech / Self-Hosting

  • Deployment: Install cloudflared daemon on your server to establish tunnels.
  • Configuration: Supports YAML configuration files for advanced setups.
  • Scalability: Designed for high availability and enterprise-grade deployments.
  • Open source tools: Includes Ansible, Terraform, and Kubernetes deployment guides for automation.
  • System requirements: Lightweight daemon with minimal resource usage (details available in system requirements).