Cloudflare Tunnel

Exposing home services through Cloudflare Tunnel eliminates the need to open inbound ports on the router, thereby avoiding the security risk of directly exposing the home IP address.

Cloudflare Tunnel (formerly Argo Tunnel) is a reverse tunneling technology that establishes outbound connections to the Cloudflare edge network through a locally running cloudflared daemon, requiring no public IP, port forwarding, or firewall configuration.

The core principle of intranet penetration is to establish a relay node on a public server, where the local environment actively connects to the public server via a persistent connection, and external requests are forwarded to the local environment through the established connection.

部分运营商不提供公网IPv4，自托管用户需要通过内网穿透（frp/Cloudflare Tunnel）或IPv6解决公网访问问题

Bridging a local development environment to mobile devices typically relies on tunneling technologies (such as ngrok, Cloudflare Tunnel, or a self-hosted WebSocket service) to expose intranet services to external devices.

When Tailscale and Cloudflare Tunnel are used in combination, Tailscale is typically used for intranet access between devices, while Cloudflare Tunnel is used to provide a controlled public internet access entry point for specific domain names.

Intranet tunneling refers to using a third-party server to map services within a local area network to a publicly accessible address, with commonly used tools including frp, ngrok, and Ngrok Peanut Shell.

This reverse-proxy-plus-outbound-tunnel architecture allows local machines to expose services without opening inbound ports, without a public IP, and bypassing NAT and firewall restrictions.

Cloudflare Tunnel was formerly known as Argo Tunnel.

This architecture does no port forwarding; a small number of public-facing services are exposed via Cloudflare Tunnel, some overlaid with Cloudflare Access authentication, while the remaining services are accessible only within the Tailscale internal network.

Tunnel connectors are deployed within an intranet and actively establish outbound encrypted tunnels to public-facing nodes to bypass NAT and firewall restrictions, which is the common approach used by similar tools such as Cloudflare Tunnel and frp

Cloudflare Tunnel's Quick Tunnel mode requires no account login; a randomly generated subdomain URL is created instantly upon running the command and becomes invalid immediately after the session ends.

The 30-hour-per-week quota of this solution is not suitable for 24/7 production environments, the Cloudflare temporary tunnel URL expires after the session ends, and Kaggle Notebook has an auto-disconnect mechanism when idle.

Cloudflare Tunnel, formerly known as Argo Tunnel, is a reverse proxy service provided by Cloudflare that establishes an encrypted tunnel by having the cloudflared client actively initiate outbound connections to Cloudflare edge nodes, without requiring any inbound ports to be opened.

For home users without a static public IP, dynamic DNS services such as DuckDNS or Cloudflare Tunnel can bind a domain name to a changing home network IP.

The free version of Cloudflare Tunnel supports custom domains (requiring the domain's DNS to be hosted on Cloudflare), unlimited connections, and built-in DDoS protection.

Cloudflare Tunnel (formerly known as Argo Tunnel) was launched by Cloudflare in 2018 and opened for free use in 2021.

Port Radar 内置一键 Cloudflare 隧道功能，可将本地站点生成可访问的在线链接