It looks like they did add support but
It looks like they did add support but you need to force it to connect over IPv6, via the --edge-ip-version argument
7 Replies
root@testing4:~# sudo cloudflared --edge-ip-version 6 service install "TOKEN"
2022-12-20T17:16:38Z INF Using Systemd
And still waiting answer xD
not going to work on service install, probably just going to have to modify the service's unit file
i.e
sudo nano /etc/systemd/system/cloudflared.service
Stick --edge-ip-version 6 on the execStart line, after /usr/bin/cloudflared, before tunnel
Your ExecStart should look something like this
ExecStart=/usr/bin/cloudflared --edge-ip-version 6 --no-autoupdate tunnel run --token <token>
sudo systemctl daemon-reload
sudo systemctl restart cloudflared
If it worked, check
sudo systemctl status cloudflared
Should see something like, with the IP being an IPv6
Dec 20 09:26:18 server.hostname cloudflared[482675]: 2022-12-20T17:26:18Z INF Connection UUID registered with protocol: http2 connIndex=1 ip=2606:4700:a0::5 location=EWR
(This assumes using systemd, like on Ubuntu/Debian, etc etc)Working
beast
Thx you dude
Another quick question, is it possible to close in IN and OUT all the ports?
Can you elaborate? If you are asking if you need to open ports / add ingress rules / port forwarding for Cloudflared/tunnels to work, then nah you don't need those, it's an outbound connection from your server to CF's Edge.
Ok, all input ports can be closed. The output must remain open as usual ?
If you're talking about egress rules / egress ports, the list of what ports/domains they use is here: https://developers.cloudflare.com/cloudflare-one/connections/connect-apps/do-more-with-tunnels/ports-and-ips/
Ports and IPs · Cloudflare Zero Trust docs
Cloudflare One™ is the culmination of engineering and technical development guided by conversations with thousands of customers about the future of the corporate network. It provides secure, fast, reliable, cost-effective network services, integrated with leading identity management and endpoint security providers. These docs contain step-by-ste...
(forgot to hit reply button, @mumutii )