About Cloudflare Tunnel
Cloudflare Tunnel is a product from Cloudflare that lets you publish applications or reach private resources through Cloudflare's network. A lightweight connector runs next to the service and makes outbound connections, so the origin does not need a public IP address or open inbound firewall ports.
It is part of Cloudflare's zero trust and networking platform, and it is commonly used to expose self-hosted web apps, internal tools and SSH access with access policies applied at Cloudflare. The vendor's website could not be read when this entry was prepared, so current features and plan limits should be confirmed on the official site.
Key features
- Outbound-only connections from the origin
- No public IP needed for services
- Access policies through Cloudflare
- Exposes self-hosted apps securely
Good fit for
- →Publishing a self-hosted app without port forwarding
- →Securing access to internal tools
- Tags
- tunneling
- zero-trust
- cloudflare
- networking
- self-hosting
- security
Cloudflare Tunnel: questions and answers
- What is Cloudflare Tunnel used for?
- Cloudflare Tunnel securely connects web services and private networks to Cloudflare without opening inbound ports on the origin server. It is a good fit for publishing a self-hosted app without port forwarding and securing access to internal tools.
- Is Cloudflare Tunnel open source?
- No. Cloudflare Tunnel is proprietary (closed-source) software. Open-source alternatives to Cloudflare Tunnel include Zrok, frp and Pangolin.
- What are some alternatives to Cloudflare Tunnel?
- Cloudflare Tunnel competes with ngrok, Tailscale and Twingate. For open-source options, see Enlisted's ranked list of open-source Cloudflare Tunnel alternatives.
Open-source alternatives to Cloudflare Tunnel
See all
Zrok
Networking & VPN
Secure internet sharing made simple.
Apache-2.0vs ngrok★ 4.7kfrp
Networking & VPN
A fast reverse proxy to help you expose a local server behind a NAT or firewall to the int
Apache-2.0vs ngrok★ 110k
Pangolin
Networking & VPN
Open-source SASE platform providing secure access and connectivity to apps, infrastructure
OSSvs Cloudflare Tunnel★ 23k
Octelium
Networking & VPN
A next-gen FOSS self-hosted unified zero trust secure access platform that can operate as
AGPL-3.0vs Tailscale★ 4.1k
Rathole
Networking & VPN
A lightweight and high-performance reverse proxy for NAT traversal, written in Rust. An al
Apache-2.0vs ngrok★ 14k
OpenZiti
Networking & VPN
The parent project for OpenZiti. Here you will find the executables for a fully zero-trust
Apache-2.0vs Twingate★ 4.4k
SaaS alternatives to Cloudflare Tunnel
See all
ngrok
Networking & VPN
ngrok is developer infrastructure that exposes local apps and APIs to the internet and routes and secures traffic to services wherever they run.
SaaS
Tailscale
Networking & VPN
Mesh VPN and zero trust network that connects devices without manual configuration
SaaS
Twingate
Networking & VPN
Zero trust remote access service positioned as a replacement for business VPNs
SaaS
Cloudflare Zero Trust
Security
Zero trust network access, secure web gateway and browser isolation from Cloudflare
SaaS
NordLayer
Networking & VPN
Business VPN and network access security for remote and hybrid teams
SaaS
Zscaler
Security
Cloud security platform for zero trust internet and private application access
SaaS

