Cloudflare Tunnels: Getting Started with Domains, DNS, and Tunnels

Thanks to Linode for sponsoring this video!
Sign up today and get a $100 60-day credit on your new Linode account, link is in the description.
🔗 dbte.ch/linode
/=========================================/
Cloudflare has done some updates since this video was published. The path to get to the Tunnels area shown in the video is now as follows:
- Log into your account.
- Look for "Zero Trust" in the left column.
- Click "Zero Trust".
- That will take you to a different page.
- Look for "Access" in the left column.
- Click "Access".
- Then you will see "Tunnels".
/=========================================/
Getting started with Cloudflare can be a bit overwhelming when you're first getting started with self-hosting.
This video will hopefully help you understand the process of:
- Buying a domain
- Setting up a Cloudflare account
- Configuring nameservers to point your domain to Cloudflare
- Setting up Cloudflare Tunnels
- Restricting remote access via Cloudflare tunnels
Services I use:
Porkbun: dbte.ch/porkbun
CloudFlare: dbte.ch/cloudflare
PIA: dbte.ch/piavpn (Affiliate Link)
Timestamps:
00:00 Intro
00:22 Sponsor Spot
01:21 Purchasing a domain name
03:37 Set up Cloudflare account and change nameservers
10:54 Creating our first tunnel
15:50 Setting up hostnames
17:39 Multiple applications on a single tunnel
19:08 Restricting access
/=========================================/
Get early, ad-free access to new content by becoming a channel member, a Patron or signing up for the members' only website!
✅ / dbtech
✅ dbtech.fans/
✅ / @dbtechyt
/=========================================/
The hardware in my recording studio is:
✔ Custom PC w/ Ryzen 2600, 32GB RAM, RTX 2070, Assorted Storage
✔ Panasonic LUMIX G7 4K Digital Camera: amzn.to/3IGEOcb
✔ SAMSUNG 34-Inch SJ55W Ultrawide Monitor: amzn.to/395g9BZ
✔ LG 27UK650-W 27” UHD IPS Display with HDR 10: amzn.to/398pg4S
✔ WALI Premium Dual Monitor Stand: amzn.to/398AiqM
✔ Neewer Lights: amzn.to/3nZcoSX
✔ Light Power Supply:amzn.to/3Konpqf
✔ 55" Gaming Desk: amzn.to/3AkgHgw
✔ Sabrent USB-C Hub: amzn.to/3qFcwbV
✔ Das Keyboard 4 Professional: amzn.to/3G9rPxM
✔ Fuqido Big and Tall Gaming Chair: amzn.to/3IGegrq
/=========================================/
The hardware in my current home servers:
✔ Synology DS1621xs+ (provided by Synology): amzn.to/2ZwTMgl
✔ 6x8TB Seagate Exos Enterprise HDDs (provided by Synology): amzn.to/3auLdcb
✔ 16GB DDR4 ECC RAM (provided by Synology): amzn.to/3do7avd
✔ 2TB NVMe Caching Drive (provided by Sabrent): amzn.to/3dwPCxj
✔ TerraMaster F5-221 (provided by TerraMaster): amzn.to/3IfH2QD
✔ 5x6TB WD Red Plus NAS: amzn.to/3LnbPvC
✔ 8GB DDR3: amzn.to/3kfLTX3
✔ TerraMaster F4-423 (provided by TerraMaster): amzn.to/3kjUms5
✔ 2x8TB Seagate Barracuda Compute: amzn.to/3xBAO95
✔ 16GB TEAMGROUP Elite DDR4: amzn.to/3MzzFV9
✔ 512GB Silicon Power NVMe Caching Drive: amzn.to/3MzkBae
All amzn.to links are affiliate links.
/=========================================/
✨Find all my social accounts here:
✅ dbte.ch/
✨Ways to support DB Tech:
✅ / dbtech
✅ www.paypal.me/DBTechReviews
✅ ko-fi.com/dbtech
✅ Cashapp: cash.app/$dbtechyt
✅ Venmo: venmo.com/dbtechyt
✨Come chat in Discord:
✅ dbte.ch/discord
✨Join this channel to get access to perks:
✅ / @dbtechyt
✨Hardware (Affiliate Links):
✅ TinyPilot KVM: dbte.ch/tpkvm
✅ LattePanda Delta 432: dbte.ch/dfrobot
✅ Lotmaxx SC-10 Shark: dbte.ch/sc10shark
✅ EchoGear 10U Rack: dbte.ch/echogear10u

[@DBTechYT]

Here is a docker-compose with a restart policy to help making deploying a CloudFlare tunnel a little more straightforward: dbt3ch.com/books/access-your-self-hosted-services-without-port-forwarding/page/cloudflare-tunnels-docker-compose Thanks to The Blue Portal for sharing this with the community.

[@flynhyer4445]

thank u very much. hopefully today ill get it goin.

[@Baku-oc5fc]

Thanks!

[@enesbala5195]

Thank you!

[@brandonchappell1535]

omg, this is the first guide ive seen that doesnt involve creating dockers or other crap, its just simply, explained step by step, like a normal human being !! There is such a need for this, in this area, as not everyone is in front of a PC 12hrs a day!! Couldnt hit Sub quick enough

[@sina23sina]

Finally someone made a video with proper pace and no additional comment. Thanks very much! Very precise and on point.

[@JamieLloyd]

You sir, saved my sanity!!! No more NPM for this dude, Cloudflare tunnel all the way! Thanks for all the effort put into making this video and helping us out.

[@ScofieldMuliru]

Thank you so much for making this video. This is very informative and more so with the current environment where some ISPs restrict port opening from their end.

[@nimshuda]

Thank you for your excellent video on Cloudflare Tunnel installation! Your clear instructions saved me hours of frustration, and I quickly achieved success. Your expertise is greatly appreciated!

[@R1D9M8B4]

This was a thing that took me 5 days to figure out. A lot to learn. Of all my youtubers on this subject... you are the most reliable. Thank you.

[@DBTechYT]

Wow, thanks! Really appreciate your support :)

[@zeeminahfx8681]

This is golden. Have been searching for this solution for weeks now. Thanks for this video ☺️

[@janezhitori6203]

You trully are an network angel 😁😁. After all the port forwarding pain and you mentioned you dont do that anymore, this saved me! Thanks a lot for all your videos. You sir got new subscriber with the bell on 😊

[@10a3asd]

This is gold man. I've been leaning towards this solution and slowly learned the bits and pieces as time goes on. Thanks so much for laying all this out. Incredibly valuable!

[@DBTechYT]

Glad it helped!

[@AndyCastillo]

Your video was very helpful. I was able to run Foundry VTT on my windows desktop and I'm grateful for your instruction. I've been trying to do this for over a year. Thanks!

[@dvrtimemachine]

I've watched countless videos on using cloudflare specifically, this was the most straight to the point and easy to understand video. I can't say thank you enough!!

[@DBTechYT]

really glad the video was helpful. I'd made it before, but really wanted to create something more streamlined :)

[@50_Pence]

Your videos are really great. I'm going back watching the ones now. Help so much! Thanks

[@mukeshpuppala714]

I am a noob when it comes to networking.. I was able to understand and follow each and every step ❤️. Now I am accessing my jellyfin server over the domain ❤ Thank you so much .. just subscribed

[@traviscleary6737]

Thanks for the great video and for taking time to help me out with my SSH Question!

[@hackhitt]

Thank you very much for your video, I had been looking for good information for a long time and you gave it to me. Subscribed and grateful, greetings from Venezuela.

[@sreenathramanna8881]

One more top quality session from Dave! As a side note, most of the technical videos, I usually watch it 1.2x speed. Can't do it at Dave's speed of speech! 😆

[@SK-qu4wo]

I don't get it. He speaks fast so why would you speed up the video?

[@DavidPeele]

This was great!! Thanks. I never knew about Cloudflare tunnels and have only used DNS forwarding with open ports. Now I can close all those open ports on my router. And can have secure passwords for all my docker web interfaces maintained by keychain. Awesome.

[@DBTechYT]

That's awesome! I'm glad that my video helped you learn something new. Did you see my video about adding additional authentication for even more security? kzbin.info/www/bejne/rZXQk3SlZZeeqrM

[@GoibniuNihiliste]

I don't know how, but I got this working on a CGNAT. You are the greatest man to ever live.

[@DBTechYT]

That's awesome!

[@korostech254]

Your content is 💯🥶 new subscriber from kenya continue with good work

[@darrenoshaughnessy3921]

Followed another VERY well known tech blogger/tuber and got myself into deep poop (beware of stuff from the legacy Argo Tunnels days). This tutorial - and the others regarding remote/restricted access - saved the day. Clear, concise(ish), occasionally tangental (like my brain), and, if I'm sufficiently caffeinated, I can watch them at full speed! ;-) Thanks, David.

[@DBTechYT]

Glad the video was helpful!!

[@The_Blue_Portal]

You can also turn the docker file into a stack in portainer like this: version: "3.9" services: tunnel: container_name: cloudflared-tunnel image: cloudflare/cloudflared restart: unless-stopped command: tunnel run environment: - TUNNEL_TOKEN=YOURTOKENHERE You can also add this on to other stacks if you wanted to make a tunnel for each application

[@DBTechYT]

Great info!

[@DBTechYT]

Replying again to let you know I've created a page on my wiki that has this info as well: dbt3ch.com/books/access-your-self-hosted-services-without-port-forwarding/page/cloudflare-tunnels-docker-compose

[@The_Blue_Portal]

​@@DBTechYT Wow that's super dope!! Thanks for all the shoutouts!

[@DBTechYT]

Thanks for sharing!! The least I can do is credit the source of the awesomeness!!

[@nunoganho]

Perfect. Just what i was looking for. Worked fine

[@pixelfound]

Thank you so much! I was following casaos setup for raspberry pi from you to access containers from the internet, after this no more NPMs! :D

[@Deanwhu7]

Thanks so much! Was tearing my hair out trying to work this out. The closing the cmd and not editing the -d in I think was the problem

[@graham-moss]

Great video. I will definitely look into Tunnels for my applications.

[@davsyl94]

Awesome video! I have learned so much from you over the years...

[@RiffyDevine]

Just saying I found your video well googling around and I got it working with ease thanks to it. So, thank you for doing it. Going to go watch the securing CF next.

[@DBTechYT]

Awesome, thank you!

[@JuampyRabino]

Super clear! I'm gonna try this and see how it goes. Thank you so much for this

[@DBTechYT]

You're so welcome!

[@rickdjkane9370]

Great informative video. I am a beginner to self hosting, your videos help me a lot. Thanks again.

[@DBTechYT]

Glad to help!

[@ali2kan]

All great recommendations as usual DB! Porkbun is by far the best for price and privacy (and ease of use). Cloudflare is incredible! I’d say they are sooo instrumental to daily operation, that I wonder what would happen if there was a significant outage. This all makes me think if I should think of some sort of ‘Plan B’ - if things go down, or receive maintenance. But if CloudFlare goes down - that everything might be as well... which is definitely a scary thought!

[@DBTechYT]

I've been considering a plan b as well. Trying to figure out the best plan for me. Might make a video about it when I have something figured out

[@TheInfamousToTo]

Hey Dave, great video as always. im lucky to find your youtube channel somehow , keep up the good wok

[@DBTechYT]

Hey, thanks!

[@jeffherdz]

OMG !! You have saved me 100 hours of time and just maybe a few brain cells. Thank you !

[@DBTechYT]

Excellent!

[@camlcase]

Awesome guide! ⭐ Question: Are there any performance differences depending on how you host your Cloudflare Tunnel on your local network? Like installing the tunnel on your machine or when hosting it with Docker?

[@chadmarkley]

Start to finish video was SOOOOO smart. Well done sir

[@DBTechYT]

Thank you kindly! I really felt like I needed to make this one :)

[@maikelboom5764]

Amazing, thank you for the master class , i learn a lot of new cool things with your videos. Merry Christmas btw. :)

[@DBTechYT]

Thank you so much! Merry Christmas 🎄⛄

[@DecouvrirLaTechnologie]

Thx for this video. I needed to set that up for more security

[@johnmroz315]

NPM is being retired and I have closed off the ports that I used to have open on my Firewall. I did have to do something differently though. I use a cloud service and have a Tunnel setup for it. I wanted to restrict it using the IP Address and Bypass method you showed but that would not work. I could net get through. I changed it to Service Auth and it works. I can reach from my home IP but not when I fire up a VPN and my address changes. This is a great solution and no more worrying about Ports, Certs, and NPM.

[@jaymax97]

Holy cow man this is the video I needed! Never could understand nginX proxy manager. This seems way easier to me. Thank you for showing this alternative method.

[@DBTechYT]

Glad it was helpful!

[@johnvsf]

Great video! Thank you for sharing!

[@TheMichael2019]

Thank you so much for this vid as it helped me protect a service on my home server that didnt have a log in.

[@adifoto6362]

Thanks for the video for another informative and easy to fallow video.

[@thomas3872]

Just what I was looking for. Thanks man!

[@DBTechYT]

Awesome! Really glad the video was helpful!! I've got another video coming that will expand on this to use 3rd party authentication like Google and Github :)

[@thetechguyreviews7945]

This was incredibly helpful! Thank you

[@DBTechYT]

Glad it was helpful!

[@tokoshiro5]

great video, all I needed !

[@TheManuforest]

This is the video I was waiting for. Thanks mate ! I love Cloudflare ,... Cheers :)

[@DBTechYT]

Glad you found it helpful! 3rd party identity provider integration video coming tomorrow

[@mikeburke7028]

Thanks for this as I've always shied away from opening ports on my home network

[@DBTechYT]

Glad to help

[@golvellius6855]

Dude, thank you so much for helping me understand all this jumbo mumbo bro fr❤❤❤thank you!

[@DBTechYT]

Happy to help!

[@golvellius6855]

@DBTechYT I hope you feeling better we been praying for you

[@craigsdashcam7436]

Dave this is brilliant cheers! ill be setting mine up over christmas. what about an updated nextcloud video including these options to get it up and running? , again cheers! :)

[@DBTechYT]

I guess I've underestimated how many people use NextCloud. I've never found a good use for it. But I made this video a while back: kzbin.info/www/bejne/pmGsaaOfoNJlhpY

[@edgardoirizarry9997]

Yes yes yes! That’s what I needed min 18. I don’t know why I never click on that top button smh 😂 you are the man. Thank you for such a great video. Must appreciate it!

[@DBTechYT]

YAY!! I'm glad this helped!! I've got another video coming that will show how to integrate 3rd party authentication like Google and Github :)

[@edgardoirizarry9997]

@@DBTechYT looking forward to see it. Now on my way to change some settings on my server and update my tunnel. 🍻

[@DBTechYT]

@@edgardoirizarry9997 YAY!!

[@HighVoltageBrewery]

Thank you, this was exactly what I needed to day. Now I have a WebODM page up and running with email verification

[@DBTechYT]

Awesome!

[@user-gf7xk7wv7x]

Thank you for the useful and free information. I have a question: I need to do a tunnel on my Mac High Sierra but cannot use Docker. Do you have any suggestions for other free tools I could use? Thank you in advance.

[@dataroman8111]

Great stuff! Thank you.

[@sharvinzlife]

Never known you can run multiple apps on a single cloudflared tunnel! Love it 😍❤️ Thanks always your comprehensive & wonderful tutorials. Could you please tell me how do you update the cloudflared tunnel, I see on my dashboard there is an update avialable but I cannot connect my tunnel through shell on Portainer? Thanks in advance.

[@javiesteban4510]

Perfect video!!!! BEST vídeo to Learn install and configure cloudflare

[@DBTechYT]

Glad you liked it!

[@MichaelCarreras]

Damn DB, I love all your stuff, and you have helped me so much over the years. I was going to do this, but there is an upload limit of 100mb for free plans. might be a good idea to let people know that these free accounts are limited. Now if that only applies to cloudflare hosting, then I will stand corrected, but it appears to be managment for the entire site which is not cool, at least for what I am trying to do. Just thought I would remind you, while I luv ya, to remember to point out limitations before people start changing thier registrar information!

[@nicholasmincone1222]

Good point. I was implementing this and then thought maybe when this video was done there was no limit. For now I'll stick with NGINX and a Docker container to update my IP.

[@MichaelCarreras]

@@nicholasmincone1222 I just ended up purchasing a domain through cloudflare. It was more than fair on price and if I'm not mistaken, it provided a cost effective work around on the restriction yet still allowing me the ability to set up the home server via tunnel. I paid it up for like 5 years, and ultimately plan on migrating to web3 domains in the long run anyway. So far it has worked great, gaggle of musicians exchanging large multitrack files on my private server was the goal, and I can say mission successful. I am no pro like DB, and can not express enough how much I respect the guy for the time he gives to us, I'm just a guy determined to get what I need done. Thanks for the comment, and hope that helps!!

[@user-nk3ef4dz5e]

As a newbie I say: AWESOME! finally after hours of research... thanks man

[@DBTechYT]

Glad I could help!

[@Shubham_Gupta_ji]

Very helpful video sir 👍. Please make a video on how to set up ftp server using cloudflared tunnelling ..

[@DBTechYT]

I'll see what I can do :)

[@BaconAndPotatoCorp]

Holy shit this finally made it work. Thank you very much!

[@stephanelambert1846]

Great Stuff! Thanks =)

[@michaeldziegiel4954]

Awesome Video, great stuff.

[@DBTechYT]

Much appreciated!

[@seekerdroid]

Awesome stuff. My ISP doesn't provide a static IP. I can now host applications and save bucks on cloud platforms.

[@lionelmasoane391]

thank you so much this has been really informative. I would like to ask cause I see in most videos the tunnel is setup only for application or web, but what if you want to add servers to the tunnel, in my case to Azure Vm. Is this possible or been done?

[@keerapatratanasirisawad4040]

Thumbs up! I think this way easier than other method I found. By the way, is there anyway to prevent google from indexing these pages? I am using my current website for SEO as well.

[@djKenpLan09]

Just saying "what a great video!" :)

[@OgllyBoogly]

After wasting a ton of time with haproxy, and always having suboptimal results, this is amazing. I wish there was a way to automatically enable HTTPS on tunnels but overall great video!

[@DBTechYT]

It automatically enables SSLs on your domains.

[@OgllyBoogly]

@@DBTechYT Wow I did this at 2am and did not notice. I assumed it would not perform SSL offloading like HAproxy. This is even better!

[@Lunolux]

great video!!

[@singh.karanbir]

nice one - you earned my like and subscription because of this

[@DBTechYT]

Thanks!

[@ghjkqwer9777]

Good. Thanks for the instructions. Make please one more instructions for RDP connection as well.

[@DBTechYT]

You haven't even subscribed to my channel. How would you know if I made a video about it?

[@ghjkqwer9777]

@@DBTechYT I would count on your answer under this comment) But I've subscribed for the future greate videos)

[@teckho316]

Very good instructional video on how to use the tunnel, love it! One quick question, if we use tunnel for let say Pingvin or Nextcloud, is it ok to upload or download large files eg. ~ 60GB? My concern is there is no clear written rule regarding the bandwidth we can use thru the tunnel. Perhaps I overlook it or my concerns isn't a big deal?

[@DBTechYT]

I know that they have a TOS rule about media servers/streaming, but I'm not sure what they would do with file transfers like that as their language is (seemingly intentionally) vague. Read section 2.8 of their terms here: www.cloudflare.com/terms/

[@mauriciob3334]

I was setting up the same thing to my proxmox installation, got ready the home assistant and some other services. I knew about this method at work, but they used Google Workspace account to log in, thanks for the video.

[@DBTechYT]

Thanks for watching! I hope the video was helpful

[@CageTheTurtle]

Great tutorial my dude

[@DBTechYT]

Appreciate it!

[@ViszlaBoss]

Absoultly fantastic walk through thank you. Setup perfctly now. Thank you. Is there a limit to how many "Public Hostnames" you can have in a single tunnel?

[@DBTechYT]

I'm glad the video was helpful! I haven't run into any limits on hostnames :)

[@ViszlaBoss]

@@DBTechYT well you got a sub from me. Thanks again.

[@andrewpndavies]

Superb video - (and hope you're feeling better?). Two questions though : 1 - I'd like to set it so that users outside of our LAN have to enter their email to get a PIN, but when they are on our LAN, they don't. We don't have a static IP though. Do you know if there is a way of telling Cloudflare to always allow access from inside our LAN? 2 - What's the best way of running the Tunnel service on a Raspberry Pi? The docker command in the video doesn't have an ARM image. Thanks so much and stay well! Andrew

[@DBTechYT]

This should help with you first question: kzbin.info/www/bejne/bGaplXuIqJWUrqc I've heard people use the same process with Pi devices, but haven't tried it myself

[@chanceneel1]

You gave me back my sanity!

[@patrickhult]

Hi there great job you are doing. I do think that you should do a comprihemsive video series about Cloudflare Zero Trust several catagories: Analytics, Acces, Gateway, Teams, Logs and Settings. I really think this could render a lot of views. Cheers

[@ShlomiDavidson]

Hi David. Love your videos, they're awsome. Can you make a video of integrating Authelia with a Cloudflare tunnel? Thanks!

[@DBTechYT]

It's a video that is on my radar

[@ShlomiDavidson]

@@DBTechYT I forgot about Fail2ban, will it work with a Cloudflare tunnel?

[@itacirgabral8586]

the porkbun nameserver subdomains curitiba, fortaleza, maceio and salvador are cities in the northeast of Brazil

[@SmeetsDieter]

Great tutorial! Can you also create a public hostname you can use for webdav, VPN, etc...(Cannot get that working)? Thanks!

[@Sometechyguy]

David - Another great video. I just have a minor hiccup, the tunnel is functioning properly when away from the home network or even over tailscale. When I connect locally, it cannot find the server. Any ideas? the only thing I can think of is there is something with cloudflare not liking my *.5.0/24 network compared to the *.0.0/24 network you use in the video. Any ideas oh great bearded wonder? Edit - figured it out - DNSSec needed to be set the same for both cloudflare and porkbun. Thank you again for the inspiration to tinker.

[@martingerlach_1990]

Is it possible to use a security key for the restricted access of your applications inside/behind the Cloudflare Zero Trust Tunnels?

[@billsecond1]

I don't write comments a lot, but great job!!!

[@dragon3602010]

Awesome thanks and how can we not expose ports of the containers on VPS if we want to use the tunnel?

[@DBTechYT]

Containers run on ports. You could use Firewalls to block access to the containers to everything but your IP address to help prevent others from accessing your containers on the IP:Port and then use Tunnels to access them via domain names.

[@RadTechDad]

So, you've mentioned in other videos that you host Emby. Do you have that public-facing? If so, how do you get around the Cloudflare restriction on streaming? Do you run some other kind of proxy just for Emby?

[@EngineerK]

Same question here

[@NEoXeditor]

14:14 I would also add "-d --restart=always" here If the server is restarted or in the event of a power failure when you turn on the server, cloudflare tunnels will simply not work because docker has not started. --restart=always will automatically start docker (Please correct me if I'm wrong.)

[@seanwalford494]

I know it's a year on, but followed this and all working nicely. Only caveat is I've tried to setup for just specific IP access, it's still bringing up a page requesting an email address?

[@ZilchBloke]

Loads of thanks to you Dave. I have learned so much from your videos. One quick question. Do you know a way to configure CNAME in cloudflare to point towards azure storage blob to host a static website. I have spent hours and days to get it working :(

[@DBTechYT]

You'll just log into your main Cloudflare account. Open the domain you want to use. On the left menu of the domain overview page, you'll see a tab called "DNS". Click that and then you can click the "Add record" button to create a CNAME. Just make sure that the CNAME you want to create doesn't conflict with any of your zero trust domains.

[@WildAwesome]

Thanks for this David, great vid as always. Any chance you might consider doing a video where you include authelia with Cloudflare tunnels? It's what's holding me back from switching from nginx proxy manager. Thank you.

[@DBTechYT]

I might look into it, but I hated setting up Authelia when I made the first video about it just over a year ago

[@gar2k3]

@@DBTechYT you might have hated it, but your tutorial is literally the reason I use Authelia myself. Is it possible to use cloudflare / github / gmail as an SSO provider for Cloudflare tunnels?

[@DBTechYT]

@@gar2k3 You can use a bunch of different options for SSO like Facebook, Github, Google, Linkedin, SAML and a few others

[@yomajo]

Newb on devops. Where are applications coming from in this video? How would setup be different for application running on docker compose inside VPS?

[@AbdulRehman-ym9ww]

Really Informative One

[@DBTechYT]

Thanks for liking

[@deuts]

Nice video. Just so timely for my current situation. Just a question, though. What if I want to do this in a VPS, and I don't want to be opening ports in my docker-compose file?

[@DBTechYT]

your containers will always have to have ports associated with them if you want to access them. But you can install this the same way on a VPS and access it that way

[@ierosgr]

Nice video nice presentation. So it doesn t need to have a static Ip from your ISP in order to set this up. At some point when you were going to create an A record (old way) you filled in an ip address. Could there be placed a name like from a dyddns service?

[@DBTechYT]

It does NOT need a static IP. It does NOT need port forwarding. What it DOES need is for you to buy a domain and point the DNS to CloudFlare like I showed in this video. Once you've done that, you can then use the service with tunnels and there's no need to create A records or CNAMEs or anything else.

[@image969]

If I only want one tunnel, do I have to use a subdomain? Am I able to just use the domain I purchased?

[@tgrbpm]

Great tutorial! Setup my CloudFlare/ Domain. All good except that my website is redirecting to a different service (same host, different port) for authentication (IDP). I can't figure out how to handle this redirect, as it's on a different port assume the response is not routed through my tunnel. Tried setting up a sub-domain for this authentication service but it's not working. Any idea's/ suggestions how to deal or setup so that the authentication service is served through cloudflare?

[@David-bq2qh]

Good tutorial. I had a question on cloudflare ddns I have dual wan load balance + failover connections would I have to do anything else on router for it to be able to update ip?

[@DBTechYT]

Shouldn't have to. As long as the containers/systems/whatever have internet access, it shouldn't matter which ISP is being used as long as the tunnels can connect

I have problem. I created tunnel and when I add public hostname with with HTTP service which point to local IP with certain port after add them for first time works well, then Proxied CNAME record turns into non-proxied A record which point to my public IP. Where I made mistake?

[@Marc42]

Thanks for this! Extremely valuable. Shouldn't the token string be blurred out as well though?

[@DBTechYT]

Meh. I guess so if I was going to keep the tunnel active after creating the video, but the tunnel and/or the token have been changed since recording this

[@franklinan]

Dear sir, how would be the setup with Shlink? I have a domain proxied, and then with nginx redirected that domain to local_ip:port where shlink server is running. The urls are created but not accessible

[@expression3639]

18:29 But then you have to set up a subdomain for every port you want to "forward". What if an application uses a port range and both UDP and TCP on those ports?

[@vaddimka]

Great video, but I think it's missing an explanation that the CloudFlare connector container lives in our network, establishes a connection to CloudFlare and uses that connection to reverse-proxy the traffic from outside to the services inside of our network. I mean, of course it's obvious, but for some reason I had to pause and think about it before I could understand what the next steps with penvin do.

[@lezz27]

Hey Dave, great video as always. Quick question for ya..... How does the bandwidth utilization work with the tunnels? Does CF bring in some sort of limit in there? Especially when you are moving huge files back and forth. Cheers!

[@DBTechYT]

I'm not sure what they would do with file transfers like that as their language is (seemingly intentionally) vague. Read section 2.8 of their terms here: www.cloudflare.com/terms/

[@lezz27]

@@DBTechYT That section is really vague. Seems like they did it on purpose. I have been using tunnel for quite sometime now with just the regular stuff but I do have PaperMerge mapped thru their tunnels on which I host my docs in jpeg or pdf format. Last thing I want is them shutting down my access. I for sure won't take NextCloud thru the tunnel but I guess it should be fine if they are only serving as DNS for NextCloud instance and NPM is handling the traffic for NextCloud. Is that correct?

[@DBTechYT]

There's the kicker. Even if you're just running DNS through them, they still cache assets, so it's still a grey area on how things are processed through them. I think, as long as you're not running terrabytes of data through their systems every day, they won't notice and you *should* be fine.

[@lezz27]

@@DBTechYT Thanks Dave. You take care and have wonderful day ahead.