this post was submitted on 16 Nov 2025
119 points (96.1% liked)

Selfhosted

53034 readers
750 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
ruud@lemmy.world
Loki@lemmy.world
CannaVet@lemmy.world
devve@lemmy.world
HybridSarcasm@lemmy.world
HybridSarcasm@lemmy.hybridsarcasm.xyz
119
I finally understand Cloudflare Zero Trust tunnels (david.coffee)
submitted 3 days ago by artifex@piefed.social to c/selfhosted@lemmy.world
49 comments fedilink hide all child comments
 

Everything you wanted to know about using Cloudflare Zero Trust Argo tunnels for your personal network. For those like me who were still confused even after reading the article, I think this is the lowdown:

  • ZT tunnels let you expose private resources/services to the internet (or your users) via Cloudflare’s edge network. You install cloudflared on an internal host, and register a “tunnel” so that requests to a hostname or IP get forwarded securely into your network (similar to tailscale).
  • Unlike classic VPNs (which open full network access) or traditional Cloudflare tunnels (which merely publish a service), this approach adds granular access control; you can define exactly who can access which resource, based on identity, device posture, login method, etc.
  • It also solves NAT/firewall issues often faced by P2P-based overlays (e.g., Tailscale) by routing everything through Cloudflare’s network, avoiding connectivity failures when peer-to-peer fails.

For in-browser auth you can then use Cloudflare Access, or you can install the cloudflare Warp client which is a VPN-like thing that would give you full control over the access to whatever service(s) you were exposing this way.

you are viewing a single comment's thread
view the rest of the comments
[–] Technus@lemmy.zip 5 points 3 days ago (3 children)

Could start with the fact that they go down about once a month now and take half the Internet with them.

[–] KyuubiNoKitsune@lemmy.blahaj.zone 3 points 2 days ago (1 children)

They're having a major outage as I'm reading this, lol.

[–] Technus@lemmy.zip 3 points 1 day ago* (last edited 1 day ago)

I know, after I posted that I was looking at their outages and worrying that my 1/month estimate too much of an exaggeration cause they hadn't had a big one in a bit.

[–] lIlIlIlIlIlIl@lemmy.world 5 points 3 days ago (2 children)

Ah OK, so when you said “terrible company” you meant performance? I’ve had great performance with them so far fortunately

[–] helix@feddit.org 6 points 2 days ago

For me it's reliability and generally scummy business practices.

They protect scammers and sell big data centres solutions that protect from DoS attacks 🤡

[–] Technus@lemmy.zip 2 points 2 days ago

I wasn't the original person that replied.

[–] Holytimes@sh.itjust.works 5 points 3 days ago

That's less a problem with cloud flare it self and more just a issue of anything the scope and scale of what they have become. Even a better company would face the same issues.

It's fair to argue that they we should spread things out more to make them more resilient.

But that's more a knock against centralization than the service at hand. It's also fair to show that they're good enough that they were able to reach this point. Or more accurately. Everyone else was worse so they reached this point.

It always feels like blaming cloudford at this point is much like blaming the horse for its Rider.