If I have a `CNAME` pointing to a Cloudflare tunnel (Tunnel A), when I update the `CNAME` to point t

D

Daniel SincereOP•8/27/23, 4:19 AM

Or to ask the question a different way, after updating the

CNAME

CNAME

to point to Tunnel B, how soon can I delete Tunnel A?

D

Daniel SincereOP•8/27/23, 4:20 AM

I hope it's fairly quickly - less than a minute?

DDaniel Sincere If I have a `CNAME` pointing to a Cloudflare tunnel (Tunnel A), when I update th...

D

Dubz•8/27/23, 4:30 AM

I think a minute is Cloudflare's TTL for DNS, but it may be different (faster) for internal routing to update. I wouldn't rely on it heavily for automation purposes, but for an outage/recovery or migration, should go unnoticed by most.

D

Dubz•8/27/23, 4:31 AM

TTL for public DNS I mean, not internal routing

D

Daniel SincereOP•8/27/23, 4:31 AM

yeah, doing a migration -

DDubz TTL for public DNS I mean, not internal routing

D

Daniel SincereOP•8/27/23, 4:31 AM

not sure how to parse your first message in light of this correction?

D

Dubz•8/27/23, 4:32 AM

what?

D

Dubz•8/27/23, 4:33 AM

migration, you shouldn't really notice. It should be maybe a minute tops to propogate if I had to guess. In other words, unless you're doing this via automation, it'll probably be fast enough to stay ahead of you (unless you're trying to speed through it for some reason).

D

Dubz•8/27/23, 4:34 AM

Like a minute is not long at all

D

Daniel SincereOP•8/27/23, 4:34 AM

ah gotcha

D

Daniel SincereOP•8/27/23, 4:34 AM

thanks so much @Dubz (pls ping/reply) !

DDubz I think a minute is Cloudflare's TTL for DNS, but it may be different (faster) f...

D

Daniel SincereOP•8/27/23, 5:32 AM

Can a Cloudflare tunnel have multiple endpoints? Can I run

cloudflared

cloudflared

on two separate clusters?

DDaniel Sincere Can a Cloudflare tunnel have multiple endpoints? Can I run `cloudflared` on two ...

D

Dubz•8/27/23, 5:35 AM

Yes, that's what you're supposed to do. redundancy

DDubz Yes, that's what you're supposed to do. redundancy

D

Daniel SincereOP•8/27/23, 5:36 AM

Oh, so that might be another way to migrate traffic from one cluster to another!

D

Dubz•8/27/23, 5:37 AM

if the tunnel host is changing absolutely. If the target is changing, not really how that works

D

Dubz•8/27/23, 5:38 AM

it's for load balancing/redundancy basically. So if one tunnel breaks, the other can still serve. The service itself is either ran locally on that machine (like a CDN maybe) or all points to one main server they can access across either

DDubz it's for load balancing/redundancy basically. So if one tunnel breaks, the other...

D

Daniel SincereOP•8/27/23, 5:51 AM

if one tunnel breaks

Just want to make sure I understand

In Cloudflare DNS, I'll have

CNAME api.example.com dead-beef.cfargotunnel.com

CNAME api.example.com dead-beef.cfargotunnel.com

and then I'll have

cloudflared

cloudflared

running on cluster 1, and

cloudflared

cloudflared

running on cluster 2, using the same tunnel credentials. So the tunnel is load-balanced between cluster 1 and cluster 2?

D

Dubz•8/27/23, 5:56 AM

yes...

DDaniel Sincere > if one tunnel breaks Just want to make sure I understand In Cloudflare DNS, I...

D

Dubz•8/27/23, 5:57 AM

https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/install-and-setup/tunnel-useful-terms/#replica

Useful terms · Cloudflare Zero Trust docs

New! Set up and manage your Cloudflare Tunnel environment in Zero Trust. You will be able to install cloudflared as a service, create and run tunnels, …

DDubz https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/in...

D

Daniel SincereOP•8/27/23, 6:06 AM

Thank you!

B

Bjarn•8/27/23, 9:12 AM

Hi, it’s been over 36 hours with no reply on my ticket, even after this thread. I just tried spinning up a VM on Vultr

Issues still occurred around 2AM.

B

Bjarn•8/27/23, 9:15 AM

Also tweeted about it and got a reply from a stranger experiencing the same issues.

K

kian•8/27/23, 9:16 AM

I’d expect it to be looked at on Monday/Tuesday personally

B

Bjarn•8/27/23, 9:22 AM

Oh, alright. It’s been quiet compared to Friday night and Saturday morning/afternoon so it’s okay.
But what should I do next time? As this has been reproduced by multiple people and seriously was an issue somewhere along the route to or with Cloudflare impacting performance

B

Bjarn•8/27/23, 9:23 AM

It even impacted Pages and R2 being slow or even unavailable for some time

BBjarn Hi, it’s been over 36 hours with no reply on my ticket, even after this thread. ...

E

Erisa•8/27/23, 11:56 AM

I asked a colleague to look at it last night and they said they'd give it a second look today. If nothing happens by Monday then I'll take a look myself since I'm not working this weekend

E

Erisa•8/27/23, 11:58 AM

One thing that would help a lot is an mtr from an affected client

EErisa I asked a colleague to look at it last night and they said they'd give it a seco...

B

Bjarn•8/27/23, 12:05 PM

Ahh thanks

And no worries at all!

B

Bjarn•8/27/23, 12:05 PM

There's indeed 2 MTRs attached from both Digitalocean and Vultr

E

Erisa•8/27/23, 12:05 PM

Thanks

B

Bjarn•8/27/23, 12:18 PM

Appreciate the time and help - just got a bit stressed friday evening/yesterday due to complaining users

V

VoidableMoon884•8/27/23, 3:19 PM

?tunnel-tcp

F

Flare•8/27/23, 3:19 PM

Cloudflare Tunnels use Cloudflare's proxy, which only supports proxying HTTP Traffic. If you want to use non-http applications over your tunnel, Cloudflare has a few other options:

For a few specific protocols such as SSH, RDP, and SMB, Cloudflare has guides for them here:
https://developers.cloudflare.com/cloudflare-one/applications/non-http/

For Arbitrary TCP like Minecraft, MySQL, and any other tcp application, Cloudflare has a guide here: https://developers.cloudflare.com/cloudflare-one/applications/non-http/arbitrary-tcp/

For Arbitrary UDP like Minecraft Bedrock, SMTP, and any other udp application, you will need to use Private Networking with WARP: https://developers.cloudflare.com/cloudflare-one/connections/connect-apps/private-net/connect-private-networks/

Please note for all of these except SSH and VNC which can be browser-rendered, you will either need to use cloudflared (Cloudflare's tunnel daemon) on the client machine running in the background or Private Networking with WARP, and have WARP installed on the client machine logged into your Zero Trust Team.

I

Isaac McFadyen•8/27/23, 11:41 PM

?tunnel-tcp

F

Flare•8/27/23, 11:41 PM

Cloudflare Tunnels use Cloudflare's proxy, which only supports proxying HTTP Traffic. If you want to use non-http applications over your tunnel, Cloudflare has a few other options:

For a few specific protocols such as SSH, RDP, and SMB, Cloudflare has guides for them here:
https://developers.cloudflare.com/cloudflare-one/applications/non-http/

For Arbitrary TCP like Minecraft, MySQL, and any other tcp application, Cloudflare has a guide here: https://developers.cloudflare.com/cloudflare-one/applications/non-http/arbitrary-tcp/

For Arbitrary UDP like Minecraft Bedrock, SMTP, and any other udp application, you will need to use Private Networking with WARP: https://developers.cloudflare.com/cloudflare-one/connections/connect-apps/private-net/connect-private-networks/

Please note for all of these except SSH and VNC which can be browser-rendered, you will either need to use cloudflared (Cloudflare's tunnel daemon) on the client machine running in the background or Private Networking with WARP, and have WARP installed on the client machine logged into your Zero Trust Team.

FFlare Cloudflare Tunnels use Cloudflare's proxy, which only supports proxying HTTP Tra...

I

Isaac McFadyen•8/27/23, 11:42 PM

@xSkeletor see here. Yes it will work, but you'll need

cloudflared

cloudflared

installed on both the client and server. You can't do it if it's installed only on the server.

I

Isaac McFadyen•8/27/23, 11:44 PM

I'd recommend TCPShield if you're just looking for DDoS protection.

I

Isaac McFadyen•8/27/23, 11:44 PM

https://tcpshield.com/

I

Isaac McFadyen•8/27/23, 11:44 PM

And they have a free tier.

If I have a `CNAME` pointing to a Cloudflare tunnel (Tunnel A), when I update the `CNAME` to point t

Similar Threads

Similar Threads

Similar Threads