Securing SQL & TCP Applications with Cloudflare Zero Trust & SSO (Step-by-Step Guide)

[@haririan2]

you are my hero ❤❤❤❤❤❤❤❤ i have been looking for this problem about two year thank you very much :X:X:X

[@JhonnyPrz]

¡Belleza de tutorial, excelente! Gracias por el video.

[@miinayeem]

Thank you for this video. I was stuck after configuring the TCP port on Cloudflare zero trust.

[@yeon-cloud]

This works great, thanks.

[@NathanielAmadi]

This is great, thanks a lot. So, can I achieve the same thing by using the Cloudflare WARP Client installed on the client (My Macbook) instead of installing cloudflared, such that it also uses SSO to connect to the SQL server in my private network?

[@williamlee9135]

This is great and works amazing! I have followed a lot of your videos and really appreciate everything your sharing. I am stuck on one thing. I have already setup my postgresql db on cloud flare. It's exposed. Already assigned unique IP for security. Now, If I want to connect that DB in another application, let's say DBT cloud, how can I achieve that? Thanks!

[@appengr3278]

I am getting this error "failed to start forwarding server: listen tcp 127.0.0.1:1969: bind: An attempt was made to access a socket in a way forbidden by its access permissions." any Idea what this is? I have not set any access on the cloudflare side, and I wont need too. Is this permission on the local side? Because of this it won't connect.

[@staticalmo]

does it make sense to "expose" it with cloudflare when with an API (like DreamFactory) we can give specific rights? With a bearer token

[@andreX374]

Hi, this is a super cool video, it clarified a lot of things for me, I am doing the same thing but using Linux and a Windows client machine. And I wanted to ask if for the Windows client it is also necessary to install the Cloudflared daemon and run the same command?

[@6bOemH2gKz]

I guess this tutorial is missing something about the host side running cloudflared... hope to get some feedblack if i'm wrong. thanks

[@Techdox]

All of this is covered, did you watch the entire video? In the section “connecting to an unsecured service” I show you how to install Cloudflared

[@HenricLilliehöök]

How did you use the Github token to login to your DB-manager? If you only authenticate the Application on CF using Github, there is no SSO. How would you implement SSO all the way into a web application you run in your lab, say Portainer e.g.? Thanks!

[@yakisobaguitarist]

One of your domains is Minecraft. Did you get that working through cloudflare tunnel somehow?

[@Techdox]

Yeah it’s going via Cloudflare but just via any other dns not via the tunnels

[@julioffigueiredo]

Is there any way to make an config, yml or via command line to start more than 1 service in one command line?

[@cesarayalavargas3623]

How could i pass the credentials to my vercel app?

[@ricgondo]

Can the client be the same as the server? I understand you are using docker... but let's say can the client in your case be the same as my SQL Server machine?

[@Techdox]

Yeah, if you are running SQL Server on a server you can connect to it from the exact same machine which would be the client, correct? If I misunderstood let me know :) Also since you are a member you get 1:1 support with me in Discord, so feel free to ask there

[@ricgondo]

Yes sir!@@Techdox

[@victorcoopers]

Is there a way to run the command 'cloudflared access tcp --hostname' as a Windows service? This would allow it to automatically start up on system reboot. I can't seem to get it to work.

[@Techdox]

Could make it a powershell script then add that to your startup?

[@victorcoopers]

Okay, thanks! @Techdox One more question: is there a way to have the session duration for the application set to unlimited, so I don't have to authenticate again?"

[@Techdox]

@@victorcoopers Maybe? I would have to check, but even though this is a home setup it's always best to use best practives to make sure you don't expose yourself in terms of security

[@victorcoopers]

@@Techdox Any chance it will work with android phone using their cloudflare One Agent to access the tcp?

[@haririan2]

is there anyway to run it in background ? i dont want to keep opening cmd

[@Techdox]

I don't use windows much, but I assume you can just create a batch script or something with the commands and have that run in the background? Or a Powershell script?

[@haririan2]

I've used task scheduler for running script on Windows start tnx again for ur help ❤

[@enricoroselino7557]

so the client cant just use the domain name like accessing regular http/s, thats why i cant connect from other pc

[@Techdox]

From the testing I have done, the domain name can’t be used from what I have seen

[@Zaplax]

how can i do for mc server

[@Techdox]

Feel free to join the Discord, we can help you there :)

[@twitchizle]

you fuking amazing