Can a Cloudflare tunnel have multiple endpoints? Can I run `cloudflared` on two separate clusters?

DDaniel Sincere Can a Cloudflare tunnel have multiple endpoints? Can I run `cloudflared` on two ...

D

Dubz•8/27/23, 5:35 AM

Yes, that's what you're supposed to do. redundancy

DDubz Yes, that's what you're supposed to do. redundancy

D

Daniel SincereOP•8/27/23, 5:36 AM

Oh, so that might be another way to migrate traffic from one cluster to another!

D

Dubz•8/27/23, 5:37 AM

if the tunnel host is changing absolutely. If the target is changing, not really how that works

D

Dubz•8/27/23, 5:38 AM

it's for load balancing/redundancy basically. So if one tunnel breaks, the other can still serve. The service itself is either ran locally on that machine (like a CDN maybe) or all points to one main server they can access across either

DDubz it's for load balancing/redundancy basically. So if one tunnel breaks, the other...

D

Daniel SincereOP•8/27/23, 5:51 AM

if one tunnel breaks

Just want to make sure I understand

In Cloudflare DNS, I'll have

CNAME api.example.com dead-beef.cfargotunnel.com

CNAME api.example.com dead-beef.cfargotunnel.com

and then I'll have

cloudflared

cloudflared

running on cluster 1, and

cloudflared

cloudflared

running on cluster 2, using the same tunnel credentials. So the tunnel is load-balanced between cluster 1 and cluster 2?

D

Dubz•8/27/23, 5:56 AM

yes...

DDaniel Sincere > if one tunnel breaks Just want to make sure I understand In Cloudflare DNS, I...

D

Dubz•8/27/23, 5:57 AM

https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/install-and-setup/tunnel-useful-terms/#replica

Useful terms · Cloudflare Zero Trust docs

New! Set up and manage your Cloudflare Tunnel environment in Zero Trust. You will be able to install cloudflared as a service, create and run tunnels, …

DDubz https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/in...

D

Daniel SincereOP•8/27/23, 6:06 AM

Thank you!

B

Bjarn•8/27/23, 9:12 AM

Hi, it’s been over 36 hours with no reply on my ticket, even after this thread. I just tried spinning up a VM on Vultr

Issues still occurred around 2AM.

B

Bjarn•8/27/23, 9:15 AM

Also tweeted about it and got a reply from a stranger experiencing the same issues.

K

kian•8/27/23, 9:16 AM

I’d expect it to be looked at on Monday/Tuesday personally

B

Bjarn•8/27/23, 9:22 AM

Oh, alright. It’s been quiet compared to Friday night and Saturday morning/afternoon so it’s okay.
But what should I do next time? As this has been reproduced by multiple people and seriously was an issue somewhere along the route to or with Cloudflare impacting performance

B

Bjarn•8/27/23, 9:23 AM

It even impacted Pages and R2 being slow or even unavailable for some time

BBjarn Hi, it’s been over 36 hours with no reply on my ticket, even after this thread. ...

E

Erisa•8/27/23, 11:56 AM

I asked a colleague to look at it last night and they said they'd give it a second look today. If nothing happens by Monday then I'll take a look myself since I'm not working this weekend

E

Erisa•8/27/23, 11:58 AM

One thing that would help a lot is an mtr from an affected client

EErisa I asked a colleague to look at it last night and they said they'd give it a seco...

B

Bjarn•8/27/23, 12:05 PM

Ahh thanks

And no worries at all!

B

Bjarn•8/27/23, 12:05 PM

There's indeed 2 MTRs attached from both Digitalocean and Vultr

E

Erisa•8/27/23, 12:05 PM

Thanks

B

Bjarn•8/27/23, 12:18 PM

Appreciate the time and help - just got a bit stressed friday evening/yesterday due to complaining users

V

VoidableMoon884•8/27/23, 3:19 PM

?tunnel-tcp

F

Flare•8/27/23, 3:19 PM

Cloudflare Tunnels use Cloudflare's proxy, which only supports proxying HTTP Traffic. If you want to use non-http applications over your tunnel, Cloudflare has a few other options:

For a few specific protocols such as SSH, RDP, and SMB, Cloudflare has guides for them here:
https://developers.cloudflare.com/cloudflare-one/applications/non-http/

For Arbitrary TCP like Minecraft, MySQL, and any other tcp application, Cloudflare has a guide here: https://developers.cloudflare.com/cloudflare-one/applications/non-http/arbitrary-tcp/

For Arbitrary UDP like Minecraft Bedrock, SMTP, and any other udp application, you will need to use Private Networking with WARP: https://developers.cloudflare.com/cloudflare-one/connections/connect-apps/private-net/connect-private-networks/

Please note for all of these except SSH and VNC which can be browser-rendered, you will either need to use cloudflared (Cloudflare's tunnel daemon) on the client machine running in the background or Private Networking with WARP, and have WARP installed on the client machine logged into your Zero Trust Team.

I

Isaac McFadyen•8/27/23, 11:41 PM

?tunnel-tcp

F

Flare•8/27/23, 11:41 PM

Cloudflare Tunnels use Cloudflare's proxy, which only supports proxying HTTP Traffic. If you want to use non-http applications over your tunnel, Cloudflare has a few other options:

For a few specific protocols such as SSH, RDP, and SMB, Cloudflare has guides for them here:
https://developers.cloudflare.com/cloudflare-one/applications/non-http/

For Arbitrary TCP like Minecraft, MySQL, and any other tcp application, Cloudflare has a guide here: https://developers.cloudflare.com/cloudflare-one/applications/non-http/arbitrary-tcp/

For Arbitrary UDP like Minecraft Bedrock, SMTP, and any other udp application, you will need to use Private Networking with WARP: https://developers.cloudflare.com/cloudflare-one/connections/connect-apps/private-net/connect-private-networks/

Please note for all of these except SSH and VNC which can be browser-rendered, you will either need to use cloudflared (Cloudflare's tunnel daemon) on the client machine running in the background or Private Networking with WARP, and have WARP installed on the client machine logged into your Zero Trust Team.

FFlare Cloudflare Tunnels use Cloudflare's proxy, which only supports proxying HTTP Tra...

I

Isaac McFadyen•8/27/23, 11:42 PM

@xSkeletor see here. Yes it will work, but you'll need

cloudflared

cloudflared

installed on both the client and server. You can't do it if it's installed only on the server.

I

Isaac McFadyen•8/27/23, 11:44 PM

I'd recommend TCPShield if you're just looking for DDoS protection.

I

Isaac McFadyen•8/27/23, 11:44 PM

https://tcpshield.com/

I

Isaac McFadyen•8/27/23, 11:44 PM

And they have a free tier.

XxSkeletor but at least it doesnt expose my ip to clients

I

Isaac McFadyen•8/27/23, 11:51 PM

TCPShield doesn't either. Port forwarding does not expose your IP - it simply allows a proxy (such as TCPShield) to access your server. As far as I know, only TCPShield IP addresses are visible when using it.

I

Isaac McFadyen•8/27/23, 11:51 PM

I might be wrong though.

Ccraftxbox gah, i'm stuck in an infinite loop at turnstile trying to log into my dashboard

I

Isaac McFadyen•8/27/23, 11:51 PM

?turnstile-challenges

I

Isaac McFadyen•8/27/23, 11:51 PM

You can try these? Might help.

I

Isaac McFadyen•8/27/23, 11:52 PM

Oh wait, wrong tag, one sec.

I

Isaac McFadyen•8/27/23, 11:52 PM

?turnstile-issues

F

Flare•8/27/23, 11:52 PM

If you're having trouble passing Cloudflare Turnstile challenges, you can try taking the following steps:

Check your browser and use a different one if necessary. Cloudflare Turnstile supports the latest versions of popular browsers (Chrome, Edge, Firefox) but some forks (such as Pale Moon) are not supported.
Disable your browser extensions. Sometimes browser extensions can cause Turnstile to block your browser.
Scan your computer for malware (for example, using a free tool such as Malwarebytes). Sometimes malware can cause Cloudflare Turnstile to detect your computer as malicious and block it.

Can a Cloudflare tunnel have multiple endpoints? Can I run `cloudflared` on two separate clusters?

Similar Threads

Similar Threads

Similar Threads