You Need to Learn This! Cloudflare Tunnel Easy Tutorial
ฝัง
- เผยแพร่เมื่อ 16 มิ.ย. 2024
- Cloudflare Tunnels is an amazing technology that can not only replace traditional VPN in many cases, but has a number of distinct advantages. In this video, I discuss those advantages and then go through a complete Cloudflare Tunnels setup from start to finish.
Crosstalk Merch: www.crosstalksolutions.com/pr...
Step-by-step blog post: www.crosstalksolutions.com/cl...
Timecodes:
00:00 Intro
01:06 Cloudflare Tunnels explained
02:06 Cloudflare Tunnel advantages
04:28 Getting Started with Cloudflare Tunnels
07:04 Cloudflare Tunnels step-by-step setup - adding your domain to Cloudflare
11:45 Creating your first Cloudflare Tunnel
16:04 Creating a cloudflared Docker Container on Synology NAS
21:20 Exposing internal LAN services through Cloudflare Tunnels
27:31 Locking down access to Cloudflare Tunnels
32:55 Final thoughts
----------------------------
Buy me a coffee! ko-fi.com/crosstalk
Crosstalk Discord: / discord
Follow me on:
- Twitter: / crosstalksol
- Facebook: crosstalksolutions
- Instagram: / crosstalksolutions
- TikTok: / crosstalksolutions
- LinkedIn: goo.gl/j2Ucgg
Crosstalk Solutions - RECOMMENDED PRODUCTS: crosstalksolutions.com/recomm...
Amazon Wish List: a.co/7dRXc67
Crosstalk Solutions offers best practice phone systems and network/wireless infrastructure design/deployment. Visit www.CrosstalkSolutions.com for more info! - วิทยาศาสตร์และเทคโนโลยี
Thank you for a very thorough and easy to follow tutorial. This is exactly what I've been looking for for months.
Man, this is actually awesome! Thank you very much for the walkthrough! I already played around the console with some domains I own but never actually explored the tunnels! Awesome stuff! You just got yourself a new subscriber!
Chris, This was so easy to set up in a matter of a few minutes. I admit the TLS had me a little tweaked. But all has been rectified and working as it was intended. Thank you.
I appreciate your instructive dialog! You have a great way of slowing down enough and explaining WHY something is being selected! Extremely helpful! Thank you!
Hi Chris, great tutorial - well paced and easy steps to follow. As with Jeff, tripped up on TLS which needed to be turned on - as you had documented so I would recommend people download this too. Great Job
Thank you so much for your helpful tutorial on setting up a Cloudflare tunnel! Your clear and concise explanation made it so easy for me to get started. I really appreciate the time and effort you put into creating this video
Chris, very through. I have done this same thing a few months back. I did it in a poking around method. I came to both you and Tom L for clarification in the process. The Warp is also a very nice portion of this product.
Chris bringing quality and useful content as always! Keep it up! You are doing great! :)
Best. Tutorial. Ever. Holy cow! I cannot thank you enough! I can't even count the number of step by step install instructions that fail to mention crucial information and cause endless hours of frustration. This was simple, and you had the troubleshooting right there to get me past the last step! Stoked to finally have real domain names for my servers!
EXACTLY!!
Great tutorial, really appreciate you going through what breaks linkages, particularly with respect to TLS certs.
Thank you for another great video Chris! I've watched others but yours is the best because you go the extra mile to show how to setup the application authentication! I have got this all setup on my end with no problems!
Dude, Your videos are pretty great. Like your delivery, pacing, and ... basically, how you talk and the hand motions make it a very watchable and interesting video. Appreciate It.
Came over here after watching Network Chuck, compared to him I like the way you go over the details slowly but also explain things in simple terms. I'll be trying this out tomorrow morning. You earned by sub! Look forward to more tutorials.
Yes! Please. A video on setting up cloudflare to access your entire network! Fantastic content.
It should ALWAYS be mentioned that when using Cloudflare's services they can decrypt all of your tunneled TLS-encrypted traffic. There is a reason this service is offered for free, and it's not because Cloudflare is a charity. I wouldn't touch it with a ten foot pole.
😂👍
how dare you
Not a good idea. Why expose your entire network ???
Sarcasm?
Thank for this very helpful tutorial. I had a few bumps in the road for my particular situation, but using both the video and the blog post, I finally succeeded.
I am at a loss for words. That's the best explanation for the Cloudflare tunnel I've ever seen. Congratulation. Subscription is set. Thank you very much.
I'm using this to externally connect to my Home Assistant instance, as well as a couple media management tools I have, and it's flawless! Very glad that this exists, and is aimed at making things simple, while being secure.
would you mind sharing how you did it? Thank you!
thinking of doing the same , just a matter of remembering my CF account last time I was just pointing the CNAME . Domain Name to what ever port I wanted *edit* finally found the correct email account so on tomorrows todo list
(Another) awesome tutorial, thanks so much for the super-clear directions! Worked like a charm!
Hello, this is the most descriptive, detailed and step-by-step video I have ever watched. Thank you very much.
i've seen a lot of videos to do this, this is BY FAR the best, thanks.
Great video! Thanks!
My general practice is three-pronged:
1. Public access: Cloudflare Tunnel
2. Access restricted to a few known users: Cloudflare Tunnel + Cloudflare Application
3. Personal access for administration: Tailscale
Yes! Please. A video on setting up cloudflare to access your entire network would be great! Thank you very much.
This literally solved my 2 weeks headaches of messing with NAT, firewall rules, gateways and whatnot in Pfsense. Thankkk you!
Thanks for the detailed view! I've been using a tunnel for several months and had no idea about all the options.
Wow, first of all, love the way you vividly and clearly present this. Secondly , this is sth I've been thinking of for months, since providers in Brazil and in Europe are massively switching to cg-nat. Making my VPN a hassle.
Would be awesome if Mikrotik will support the function that you put in the docker. Seems the right function for a router to me. Thanks.
Went looking for Mikrotik solutions right away. Seems they are fully supporting it. Awesome.
I am currently going through a home server rabbit hole. I've wanted set up a nice home server that serves also as cloud storage for personal files, and I wasn't sure about going forward because of security. This is seriously giving me motivation to try it out and set up a personal server.
curl into the fetal position and lay on the floor
without cf tunnels you can still have a relatively locked down home server if you just open the port to vpn in and nothing else. But vpns are not as neat.
Nice tutorial. Didn't work for what I wanted but a little more research and I was able to get that going. Thanks for the info, I'll be testing this quite a bit before home and work implementation.
Fantastic video and walkthrough! I had no issues following along and setting this up for my self-hosted services. I'm glad you went to LTX and I found your channel after watching the home lab panel.
This is awesome, great tutorial! Please do more!!!
Thanks for this Chris. Very well presented. I might set this up as a secondary access model. I currently use WireGuard running on a VM and will keep it that way. My concern about the CloudFlare setup it that its "cloud service" that the user is giving a lot of personal information, and even control. Then tying security authentication back to Google, who we all know retains more information on people than they know, just like this message I am send you, further makes me not want to do this. CloudFlare states it keeps 24 hour "logs", another reason to avoid. No logs, maybe, but we all know that all ISP and VPN providers retain logs, even when they lie and say they dont. Nothing is perfect or secure. Best regards, this was a great video.
Add on abit, vpn providers market vpn services as secure connection while not exposing any information on your device. But This can be only true if you have logs to verify that the connection is secure. Without it, the claim is vague.
@@huyongjie2992 Or you can run independent live-test certifications to verify the security without logging the user traffic.
Dude you're amazing. I first thoght "an overexplained version" but no, as someone else pointed, you mention all the critical steps thst others YTbers skip.
A MEGA thank you brother, keep it up. ❤❤❤
Thank you, I have been playing with this for awhile now and thought it would be impossible to get my udmp login screen through the tunnels...You explained this like no other I have seen yet.... Excellent video and doc!
Chris, you are a one of a kind honest and helpful. This was a great video tutorial. Many youtubers like to leave/hide out a few steps here and there making it frustrating to implement. hope to see more videos like this.
i just started watching this video but the way you talk shows that you know what you do and you are confident about it, very nice.
Yt😅😅😅
Thanks for the great video! I’d be really interested to see another video about how Cloudflare Tunnels could replace a VPN for full LAN access.
THANK you for covering the failure modes as well, that helps a ton!
Great video!!! You literally answered all my questions during the tutorial, keep it up, you are great
Chris... I have implemented CF in my homelab as well similar to your configuration. Only difference was using an Ubuntu Virtual Machine as my cloudflare connector server. Works like a charm...
5:36
I love and appreciate all of your help with serious information online for CHRISTOPHER FAWCETT!!
@@machook1987 I have submitted the features of business.
Use tailscale also free with SSH security and wireguard. Very simple and works.
You're the college professor I didn't have during my college days. Thank you for teaching so well, I'll recommend your channel to my friends.
Thank you for a brilliant and easy to follow tutorial. I have been looking for a solution like this for ages!
A super secure DDNS server on steroids. If Docker can be integrated into consumer-based routers through a software repository without the need for a secondary device to run 24-7, it would be a major game changer for home and small office users that require remote access to NAS devices, surveillance systems, and other basic resouirces. Thanks for the info! I've never heard of this service before! A very informative video!
Would absolutely love an extended video on using it for users to VPN in
you are simply the best. Used this for Jellyfin and maaaan, i tried so much other videos but yours ... just THANK YOU
The way you explain the things is next level! Answered all my questions
Hey Chris, again great video! it's worth mentioning that people who set up Zero trust for the first time, need to pick a plan. You can choose a $0 free plan, but you do need to enter CC details or another payment method.
Thanks, I was confused until I read this.
Great tutorial! One thing to note: g. You will be required to add a payment method even though it's free. Add the payment on the main page if you get an error when prompted for a payment elswhere. Works like a charm.
When hosts deliberately omit key aspects especially costing etc. I simply follow cancel culture and move on. Why would you omit key aspects? its the same as some omitting certain steps in a process etc. Time is value, I already wasted time writing this. :)
Or because the account was set up some time before, the host either forgot or wasn't required to enter a payment method at the time of enrollment.
I just find there are simply too many youtube channels promoting aspects of learning which are in demand, but end up to be a promotor or affiliate or such, without the facts being put forward before-hand. It takes away from the positive experience and leave viewers such as myself feel cheated. @@doujinflip
The blog guide is simply amazing! Congrats for the hard work.
Wow. What an eye opener this video. Wasn't aware if any of this. Thanks for the excellent video!
THIS LOOKS GREAT!! i love zerotier! wonder how these two services compare? perhaps another video? :)
cloudflare tunnels are freaking amazing
Agreed.
@@CrosstalkSolutions How is this different from Ngrok?
Absolutely great video tutorial! Many thanks for figuring all of this stuff out and explaining it so well!
Thanks a lot. I now have to do everything manually. Your tutorial is awesome!! Much appreciated
Awesome awesome work. You are on a different universe on making tutorials compared to anything else on the net!
For this to overtake VPN the service would need to be embedded into gateway routers and network security appliances.
From an IT support perspective, VPNs are also used for remote troubleshooting/problem resolution which cannot rely on devices to host VPN or equivalent services.
From a security perspective, the trust in cloudflare to maintain rock-solid security in their hub would otherwise be unnecessary where vpn keeps that in-house.
This has a potential for microbusinesses that rely on ad-hoc support, I doubt Managed Service Providers will be keen to accept this for larger businesses.
100% - Engineer with a Northern California MSP
Well done for making this video, you prompted me to do this but I used a Raspberry Pi as the "connector". It works exceedingly well so I have moved my existing domain name to CloudFlare. The Raspberry Pi does not need detailed configuration via command line, just the basics to get it operating, from then on it is configurable via the Cloudflare dashboard. A slight variance to your set up was that even going for the free package it still went through payment options page. So far I am very pleased, it works very smoothly. One criticism is that using the emailed PIN option the email contains the URL that you are wanting access to, fine as long as the email is not intercepted.
Thanks for the tutorial. I have a Synology NAS and was able to set it up exactly as you outlined. Can remotely manage my home network. Initially had some issues connecting to my Synology NAS but figured it out. Works like a charm. This is so much better than using a VPN and it's complicated for me to open ports because my LAN is behind two NAT routers.
What did you do to fix it? I am currently having issues and can't seem to figure it out.
Thank you for the nice video!
I have done it and works fine!
The problem is if you Configure a NAS via cloudflare free account and after that you will sync files from a device(mobile) to your NAS, allow only files up to 100MB!
For example a large mp4 video more than 100MB cannot to sync (upload) from a device to NAS via Cloudflare tunnel!
I had Cloudflare already installed but this video explained a lot more. Further if you are running Home Assistant on a Raspberry Pi then there is a Cloudflare Add on which you can install. Question: How do you need to set it up if you want Synology apps like Photo and DS Video and want to use 2FA ? In the app you need to setup the server name but then an authentication is needed ?
Thanks for the walkthrough! The basic Cloudflare docker setup procedure you outline for the Synology NAS will also work for QNAP NAS that have the QNAP ContainerStation installed.
Hands down the best tut around this. After many MANY vids, I wish I cam across your vid soooooner 🙂
I was already using cloudflare tunnels, but you gave me new information I hadn't known about. I originally set up individual applications with standardized rules for everything I'm hosting, but when you mentioned using a wildcard for the subdomain a light bulb went off in my head to change how I have it set up. Thanks!
Same
Great Tutorial Video !!! Could you create a video tutorial on how to use Cloudflare Tunnel to access servers/PCs via RDP?
This was extremely useful and clear. Thank you, I didn't know Cloudflare offered free tunneling!
Great Review. You have demonstrated this so almost anyone could setup there own setup!
Very well done tutorial and makes maintenance much easier than maintaining DNS records and a proxy manager with SSL Certs. Only thing I'd love to see is the ability to use TOPT from an authenticator app instead of the emailed code. Any tips on getting TOPT to work instead?
Yeah i want this. Im surprised there isnt an option to just use the host cloudflare authentication, IE just ask for me to enter my TOTP code of the root cloudflare account to access the site
Agreed this is much slicker, and more secure than using reverse proxy on Synology and having to punch holes in the firewall! I'm with you, I'd love to find out how to use Google Authenticator as an alternative to the e-mail codes.
I have a raspberry pi 4 based on 32-bit ARM, and I could not use the docker command from the cloudflare website zero trust dashboard to work (and yes I installed docker and cloudfared before trying the command). However, if you follow an online guide for setting up a cloudflare tunnel on raspberry pi through the CLI, you can migrate it over to the Zero Trust Dashboard once you are finished. Then, you can manage everything easily the same way as Chris shows in the video.
I even have retronas running on the same rasperry pi and after everything was done, everything still works concurrently.. even after multiple reboots.
Easy choice to sub. You made this super simple to follow. Keep up the great work!
Thank you. You're a fantastic presenter and I love your videos. This was very useful.
I think it's important to note (learned from doing with Home Assistant) section 2.8, which restrict usage to "website" like services. I am not sure if Cloudflare will block/warn if you do a lot of traffic over the tunnel.
they will... you will get ip banned.. you cannot use these for your NAS or media related stuff... only html websites... if they see you are using it for something else then static websites you will get banned... Cloudflare Tunnels are very limited... i would choose for wireguard vpn since that is opensource and selfhosted
so I wouldn't be able to use this cloudflare service for my website?
@@ayden7241 I think for websites, it is okay. They removed that section. However there is vague definition of fair usage. Your site is self-hosted?
@@hunordori yes, they're self-hosted
@@ayden7241 Websites are ok. I have my Home Assistant. Anything that is not a high traffic.
just got into Cloudflare tunnels a few weeks ago and holy shit it's amazing lol
Agreed!
Thanks for this. Its come a long way. And your guide is superb.
Man this is so cool, I love networking! This is going to make security of company resources way easier, no hassle of using VPN's for employees. Thanks for the video!
Would love to see the more advanced VPN setup as mentioned in your video.
Please do more videos on this technology, including other Zero Trust solutions from Zerotier and Tailscale. These tunneling technologies are the future of secure remote access. Traditional VPNs are failing in terms of performance. When everyone has fast upload Internet speeds with no data cap from home, running private servers will be an attractive option to keep one's data inhouse. This comes at the cost of security. These new secure access technologies will play a major role in this new data sharing lifestyle.
Tailscale is easier
i vouch for cloudflare tunnel, super quick to setup and no ports opened on my network. great video btw!
It's a GREAT time to be alive!!!! Thank you Chris!!!!
Well done! I'm a seasoned (old) I.T. guy and I'm easily bored with videos that are "dumbed down" for less techy people. This one is very well-balanced. I only skipped the docker part.
Thanks Chris, it is a great tutorial. I appreciate your time and effort to make this video. but I think it might not be a great solution for everyone. There is a limitation on serving non-html content such as video, audio and pictures especially for their free plan. I believe Cloudflare should be more transparent about their services.
Cloudfail is a downgrade compared to vpn.
Exactly the video I was looking for - thanks so much buddy!
Pretty sweet. I didn't even know this was offered, let alone for free. As of this date the tutorial went flawlessly.
for those who get an empty page with HTML code when setting up the nas subdomain, you have to disable the Automatically redirect HTTP connection to HTTPS for DSM desktop option from Control panel -> Login portal -> DSM
THANK YOU! Been beating my head against my desk for an hour. This fixed it.
I would love to see a more advanced version, with network tunnelling, and ssh security
They get money from selling collected data, I doubt that will happen
Have a look at Nebula
There’s an ssh option in the drop-down that you can configure. The rest of the steps are the same
@@eyehear10 it is possible to route IP traffic (subnets) via such tunnel when connecting with Warp client from user side.
@@eyehear10 If you enable SSH in the "Additional Settings" section when you're making a new application policy, you can access SSH directly from the browser. You can't add it retroactively though, you will just have to create a new policy and you'll see it at the bottom of the 3rd page in "browser rendering" where you then select "SSH" in the dropdown
Thank you so much for your step by step tutorial. New to self-hosting and your video made my life so much easier.
Best tutorial ever. Thank you!
For other synology users, i had to set my config in cloudflare to "https" and enable the TLS verify like he did with firewall^
That's very informative, thank you Crosstalk. what's the diffrence between this solution and having proxy manager in LAN to manage incoming traffic through cloudflare (public ip not exposed)?
This service is very compelling and most important of all FREE. Which begs the question… what’s the catch?? 😅
THANK YOU!! I’ve been searching for something like this to access my LAN while away from home. I have been on Starlink for just over a year and haven’t found a great solution to access my NAS, security system and cameras. Touring the country this summer will be a lot less stressful! :)
This is AMAZING! Thanks so much for solving a BIG problem I had. Just subscribed.
Thanks for the video. Can this be used when you create public shared links to files & folders within Synology?
Hey folks, what is the fundamental difference between two reverse proxies (e.g., one node is Linode, another is VM in LAN, VPN between these two nodes) and Cloudflare tunnel? I see the difference in price (you pay for a public-facing server) only. Reverse proxy allows you to control everything.
I'm glad you went over the locking it all down stuff, because I was thinking yeah i'd still prefer a VPN. But after seeing the options available for securing it I'm thinking I might give it a try now.
I kept hearing about how great cloudflare tunnels are but never bothered to look into it.Then all of the sudden I stumble on your video. I was up and running in a few minutes. I should have look for it earlier. Cloudflare tunnels are amazing and so simple to use! Just don't wait to put authentication on your tunnels, in fact I think it should be part of the main workflow before the tunnel route is active. Treat actors do monitor DNS zone updates and will very quickly scan your exposed internal endpoint upon creation of the tunnel.
If you have a chance can you please do a video with cloudflare and a setup with Remote desktop, thanks!
Running Guacamole in a Docker container is a good way to achieve this. Not sure if this is the answer you want though
Did you ever figure this out? I saw a comment on another channel that said cloudflare closed RDP on the free version
@@malasoat1 thanks for the suggestion, I'll look into this.. it might be what I need.
@@joshpoore5288 No not yet, I am currently looking into a few other options. I never could get RDP to work with cloudflare. It might be due to the free version I have like you mentioned.
We've been using this at work since the start of Covid - it's amazing. Warp is also an amazing VPN replacement that we're rolling out.
Note that you can also use it to expose public VMs to the Internet if you don't want to bother with firewall rules, etc. We're serving the main company website (running on VMs in Azure) over a Cloudflare tunnel.
That is the best tutorial by far in internet for this technology!! Thank you so much for it!!
Thank you so much for explaining this! It seemed so intimidating to me, but following your guide made it easy!
It is worth pointing out that Cloudflare is able to MITM all of your traffic if they wanted to.
They already effectively do this for HTTPS, because TLS is terminated on their systems and not on yours.
Back to my trusted OpenVPN tunnel on my Synology NAS then.
Yes! Either the op is a total newb/idiot, or he was payed/sponsored by cloudfail.
This is not OK. If they have access to this the government and theoretically anyone with clout can "Man in the middle" your data..
For new accounts, when selecting the free plan need to add a payment method and create a team. This is a blocking step not covered in the blog or video.
See that. Adding a payment method for a free account is BS. I'll stick with Twingate
Also did not mention that CF are providing domain names at great prices too. Makes this even easier.
Which I don’t mind, and I am gonna move my domain register away from Google.
Just use a small prepaid or virtual debit. Works just fine.
then add payment
This is legit guys! Tried it and works perfectly. You must have patience when doing this also. Thank you! You earn a sub here
Very well done tutorial. It had lots of great information and I enjoyed watching it. Thank you.