this post was submitted on 16 Nov 2025
131 points (95.8% liked)

Selfhosted

59892 readers
617 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam.

  3. Posts here are to be centered around self-hosting. Please ensure it is clear in your post how it relates to self-hosting.

  4. Don't duplicate the full text of your blog or git here. Just post the link for folks to click.

  5. Submission headline should match the article title.

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS
ruud@lemmy.world
Loki@lemmy.world
CannaVet@lemmy.world
devve@lemmy.world
ayyy@sh.itjust.works
curbstickle@anarchist.nexus
curbstickle_lw@lemmy.world
131
I finally understand Cloudflare Zero Trust tunnels (david.coffee)
submitted 7 months ago by artifex@piefed.social to c/selfhosted@lemmy.world
51 comments fedilink hide all child comments
 

Everything you wanted to know about using Cloudflare Zero Trust Argo tunnels for your personal network. For those like me who were still confused even after reading the article, I think this is the lowdown:

  • ZT tunnels let you expose private resources/services to the internet (or your users) via Cloudflare’s edge network. You install cloudflared on an internal host, and register a “tunnel” so that requests to a hostname or IP get forwarded securely into your network (similar to tailscale).
  • Unlike classic VPNs (which open full network access) or traditional Cloudflare tunnels (which merely publish a service), this approach adds granular access control; you can define exactly who can access which resource, based on identity, device posture, login method, etc.
  • It also solves NAT/firewall issues often faced by P2P-based overlays (e.g., Tailscale) by routing everything through Cloudflare’s network, avoiding connectivity failures when peer-to-peer fails.

For in-browser auth you can then use Cloudflare Access, or you can install the cloudflare Warp client which is a VPN-like thing that would give you full control over the access to whatever service(s) you were exposing this way.

you are viewing a single comment's thread
view the rest of the comments
[–] GreenKnight23@lemmy.world 25 points 6 months ago (1 children)

1000002405

[–] dogdeanafternoon@lemmy.ca 7 points 6 months ago (1 children)

I see SO much cloudflare stuff on here, I have to believe they are ads/astroturfing. I can’t understand why so many self-hosting people would tie their services to them. In my mind it completely defeats the point to self hosting in the first place.

[–] irmadlad@lemmy.world 2 points 6 months ago (1 children)

I have to believe they are ads/astroturfing.

I recommend what I use. I have no interest in shilling for any company, opensource or closed. I can understand not liking a company. That's fine. The animosity is a bit overboard imho, but with 8.4 billion people on this planet, opinions range widely. It works for what I use it for, and when it no longer does, I'll move on to something else.

[–] GreenKnight23@lemmy.world 2 points 6 months ago (1 children)

shilling or not for something you use is one thing, I made my comment because this post has a guerilla marketing smell to it.

it certainly educated me on their product and even tempted me to use it because of the real-life applications they provided. this is likely the "smell" that makes me distrust it.

top it off, I hate cloudflare because of all the engineers that use it. the unsurmountable percentage of the internet that is entirely dependent on cloudflare staying up is frustratingly apparent (especially recently).

[–] irmadlad@lemmy.world 1 points 6 months ago

because this post has a guerilla marketing smell to it.

If we were all board execs, maybe you might have a point....I guess. However, we are selfhosters, homelab'ers. As such, no one here will probably be pumping millions of dollars into the Cloudflare machine or attempting to persuade others to do so as well. As I mentioned in another comment, I can only think of around 10 major outages going back 5 years or so. Sure there have been hiccups, glitches, etc. Welcome to the internet. Shit breaks....all of it from time to time.