Man! Your videos are great, I used to expose my raspberry services using a VPN with a public VPS but I will definitely going to try this in order to learn Cloudflare, thanks a lot!
Hi!, all the steps worked like charm except the bypass thing for ssh client. Probably needs any additional setting, can you relook, in case Cloudflare changed something in latest versions.
Hello. I do the same on RPI v2 (architecture - armv71) and when execute CLI command (3:50) I see next message: package architecture (amd64) does not match system. I tried execute commands for all 4 options (32bit, 64bit, arm32-bit, arm64-bit) and with no success. What is a reason of this?
the raspberry shown on the video is using arm64 processor (aarch64), you need to make sure you use the tunnel image for arm32 arch (which is the one your RPi needs).
@@lu4t I selected arm32-bit. After CLI command executing I see next message: dpkg: error processing archive cloudflared.deb (--install): package architecture (arm) does not match system (armhf)
@@lu4t I tried it. It works but it is too dangerous. I only opened one ssh tunnel to the public internet but I can access every computer on the local network (in my house). Maaaaaan it really makes my blood frozen.
@@saitamatechno if you don't want access to the lan, you should start the tunnel attached to the docker bridge network (only the containers attached will be accessible).
Thank you for this great video. I can ssh into ubuntu 20.04 on wsl2 windows 11 via browser render ssh but I can not ssh from terminal. When I enter ssh command nothing happens, no errors, no response, just stuck. Do you have any suggestions?
sure, you need to use a tunnel (on proxy mode) from the box you're opening the terminal to reach the server. If you get stuck let me know and I'll do a video on this method.
No luck with SSH to a digital ocean droplet running Ubuntu 22.04. I followed the video to configure for ssh from terminal. The ssh from the terminal hangs. SSH with browser based terminal as well as HTTP works, so I think the tunnel is up and ssh is functional. Telnet to port 22 doesn't connect, where it should and show an OpenSSH message. SSH works correctly via the public IP address (not cloudflare subdomain). Any ideas? Thanks!
@@lu4t Ah, you need to run cloudflared as proxy on the client. I was hoping avoid installing any software on the client -- attack surface and security concerns. I'm curious why cloudflared on client is necessary. Tunnels on port 80 work without it. I also tried with Warp on the client, which is able to intercept all traffic, but no luck there either.
@@lu4t Hi There, I want to use cloudflare tunnel ssh ( Terminal One ) for bit bucket pipeline. So can you please suggest me any video / tutorial please ?
Thanks for the video. However, when I ssh from client to host, it reports "kex_exchange_identification: Connection closed by remote host Connection closed by UNKNOWN port 65535". But my cf running correctly both on server and client. Any suggestions?
thanks!. RDP is similar to ssh over terminal: you need to install a tunnel on the client also. I don't have anything runnig over RDP on my homeLab, but will have a look into it.
Hello! Thank you so much for this content! I have a question, is it the same thing for port 443? it doesn't work without an Application like in the ssh case? Because I tried the 443 https and I can't access it
the connection goes like this: client --> cloudflare ----> server. The https connection terminates on cloudflare, if you want a full TLS, you need to configure it on cloudflare dashboard, it's called "strict".
lu4t Tech, thank you very much for the great tutorial. I can now easily access node-red "EDITOR" from anywhere. How do I have to configure Cloudflare so that I am redirected to the node-red "USER INTERFACE"? I entered the "ui" in the path configuration (Subdomain.Domain/ui). Unfortunately, this does not redirect me to the node-red "UserInterface" as desired. I hope you know what I mean and that you have a solution for me. Thanks in advance. Daniel
it should work. Make sure you enter the port, or try adding a different subdomain for the ui access. Something like: dashboard.domain/ui points to nodered_IP:1880
If browser method works for you, then take it. The terminal one is just more complex and at the end of the day it will provide you the exact same result. :)
@@lu4t I think terminal would be faster and light so, rather than opening browser it would be easier to ssh from terminal. But anyway I will look into it myself. Thanks for the video.
Oh!, I thought you were talking about the tunnel config, but you were talking about ssh right?. Then the terminal is the the right choice, obviously :) Have a look at this video explaining how to ssh using terminal: ua-cam.com/video/fNSf7D8CXgA/v-deo.html
if you set up a tunnel and can access the editor, you should be able to access the dashboard using the same path that you would use to access to it locally.
@@lu4t so If I'm connected to network x with nodered and from my phone connected to the same network x the nodered site opens but if I'm connected to network y from my phone it doesn't open
@@MAShams1 again, I don't understand the problem you are having. This video shows how to access a node-red instance from outside your lan. Once you set it us, you will get access from any devide.
Sir, Can you help me onething I want to access my Home Pc using RDP Via ClousFlare Zero tunnel, but i cant access it, I can access 80 port or other port on web browser without port forrowarding but need to access RDP Windows 10, Can you help me Sir. Please.
you will need to proxy the rdp traffic, install one tunnel on each end. Watch this video: ua-cam.com/video/fNSf7D8CXgA/v-deo.html showing how to ssh proxing the traffic; for RDP would be an equivalent process (just different protocol / clients). Good luck!
@@lu4t hello, in the current video you were able to ssh without any config on client end? is that possible? the new video needs some config done on the client end right?
there are two methods: one using a terminal embedded on the browser, another using a ssh client (thick or terminal). The config needed on the client side depends on the type of ssh server you are using, and the type of ssh client you use. There no one-size-fits-all config.
it keeps telling me password incorrect for ssh rendered. It accepts the one time passcode, but wont accept my user and password please help and i verified that my login info is correct
I've been looking for this, this is gold. Thanks a lot.
thanks for your words.
Man! Your videos are great, I used to expose my raspberry services using a VPN with a public VPS but I will definitely going to try this in order to learn Cloudflare, thanks a lot!
good!😀
Man you don't know since when I was looking for this specific, you have a new follower thanks for sharing
thanks for watching!
Nice one for the addition of ssh via bypass. I was trying to figure this out for ages!
thanks for your feedback!
hey how did this work for you? did you need any custom config?
@@schoolofinterest8675 I ended up just using tailscale as I couldn’t get this to work with Termius or the various clients I use on iOS and Windows
Hi!, all the steps worked like charm except the bypass thing for ssh client. Probably needs any additional setting, can you relook, in case Cloudflare changed something in latest versions.
very nice. i got my ssh access working with just a few clicks thanks to your easy to follow video.
great! 😀
I’m so jealous, it’s been hours trying
I've been looking for the same. Thanks a ton :)
thanks for watching!
Thank you!
This is just what I needed!
😀
thanks mate, that was really healpful!
thanks for watching
This was really useful. Thank you.
thanks for watching 😃
Hello. I do the same on RPI v2 (architecture - armv71) and when execute CLI command (3:50) I see next message: package architecture (amd64) does not match system. I tried execute commands for all 4 options (32bit, 64bit, arm32-bit, arm64-bit) and with no success. What is a reason of this?
the raspberry shown on the video is using arm64 processor (aarch64), you need to make sure you use the tunnel image for arm32 arch (which is the one your RPi needs).
@@lu4t I selected arm32-bit. After CLI command executing I see next message: dpkg: error processing archive cloudflared.deb (--install):
package architecture (arm) does not match system (armhf)
Thank you this is a great video!
thanks for watching!
Great video, I will try it.
good!
@@lu4t I tried it. It works but it is too dangerous. I only opened one ssh tunnel to the public internet but I can access every computer on the local network (in my house). Maaaaaan it really makes my blood frozen.
@@saitamatechno if you don't want access to the lan, you should start the tunnel attached to the docker bridge network (only the containers attached will be accessible).
@@lu4t oooh dude! You are right, we can use docker containers. It makes sense for security. Thanks!
Thank you for this great video. I can ssh into ubuntu 20.04 on wsl2 windows 11 via browser render ssh but I can not ssh from terminal. When I enter ssh command nothing happens, no errors, no response, just stuck. Do you have any suggestions?
sure, you need to use a tunnel (on proxy mode) from the box you're opening the terminal to reach the server. If you get stuck let me know and I'll do a video on this method.
I have the same problem. Even after config the Proxy Type to “”
@@fung612 if you need to get ssh access from client terminal, you need to install a tunnel on the client also.
@@lu4t I have the same problem. Can you describe what needs to be done, please. The would like to use putty client for connections. Regards, Matt
@@Matt-oy9fx Hi, I will try to record a quick video showing how to use putty on the client side...
ssh via browser works for me, but not via terminal. i did disabled the browser render and use bypass.
the web rendering is very useful
Indeed 😀
No luck with SSH to a digital ocean droplet running Ubuntu 22.04. I followed the video to configure for ssh from terminal. The ssh from the terminal hangs. SSH with browser based terminal as well as HTTP works, so I think the tunnel is up and ssh is functional. Telnet to port 22 doesn't connect, where it should and show an OpenSSH message. SSH works correctly via the public IP address (not cloudflare subdomain). Any ideas? Thanks!
probably you need to adjust the ssh client settings, watch this: ua-cam.com/video/fNSf7D8CXgA/v-deo.html
@@lu4t Ah, you need to run cloudflared as proxy on the client. I was hoping avoid installing any software on the client -- attack surface and security concerns. I'm curious why cloudflared on client is necessary. Tunnels on port 80 work without it. I also tried with Warp on the client, which is able to intercept all traffic, but no luck there either.
thick clients accessing remotely services behind CF Edge means installing cloudflared or WARP most of the times...
@@lu4t Hi There, I want to use cloudflare tunnel ssh ( Terminal One ) for bit bucket pipeline. So can you please suggest me any video / tutorial please ?
I tried following your guide, SSH worked over Browser but not through terminal, there I get a "timed out" error message
have a look at this: ua-cam.com/video/fNSf7D8CXgA/v-deo.html
Can be used to have pihole on the go?
Very good video.. Amazing
thanks for watching 😀
Awesome!!!! Thanks for the video
thanks!... please share 🙂
awsome video thanks
thanks for watching! 🙂
Thanks for the video. However, when I ssh from client to host, it reports "kex_exchange_identification: Connection closed by remote host
Connection closed by UNKNOWN port 65535". But my cf running correctly both on server and client. Any suggestions?
I would make sure the ssh client is updated, restart the ssh server, and make sure that the tunnel container is running attached to the host nw
Hello again! what to do for R-Pi's with armhf architecture?
the RPi I have (shown on the video) is arm.
This command before installing cloudflared worked for me:
sudo dpkg --add-architecture arm
@@3liot33 thank you very much for the command. Finally I was able to finish the installation on the RP4!😉
thank you, your the best.
good to know it helped you!. thanks for watching!
Great video, thank you! Can you do a similar for RDP?
thanks!. RDP is similar to ssh over terminal: you need to install a tunnel on the client also. I don't have anything runnig over RDP on my homeLab, but will have a look into it.
i wish the audio is somewhat good but anyway its a big help
thanks for your comment!
Great explanation 👌
Can you expose an mqtt broker with argo tunnels?
Sure, you can. Just make sure you use tcp instead of http when you define the ingress rule.
Hello! Thank you so much for this content! I have a question, is it the same thing for port 443? it doesn't work without an Application like in the ssh case? Because I tried the 443 https and I can't access it
the connection goes like this: client --> cloudflare ----> server. The https connection terminates on cloudflare, if you want a full TLS, you need to configure it on cloudflare dashboard, it's called "strict".
I dont understand the need for the node red . Can you please quickly explain ?
node-red is just used to test if the tunnel is working. You can use any other http service to do the test yourself.
lu4t Tech,
thank you very much for the great tutorial. I can now easily access node-red "EDITOR" from anywhere.
How do I have to configure Cloudflare so that I am redirected to the node-red "USER INTERFACE"?
I entered the "ui" in the path configuration (Subdomain.Domain/ui).
Unfortunately, this does not redirect me to the node-red "UserInterface" as desired.
I hope you know what I mean and that you have a solution for me.
Thanks in advance.
Daniel
it should work. Make sure you enter the port, or try adding a different subdomain for the ui access. Something like: dashboard.domain/ui points to nodered_IP:1880
Ssh browser rendered working but not from terminal with bypass policy
you should see the video explaining how to use a ssh client.
I followed everything you showed. browser method worked but terminal is not working for some reason. Giving timeout. Using ubuntu server.
If browser method works for you, then take it. The terminal one is just more complex and at the end of the day it will provide you the exact same result. :)
@@lu4t I think terminal would be faster and light so, rather than opening browser it would be easier to ssh from terminal. But anyway I will look into it myself. Thanks for the video.
Oh!, I thought you were talking about the tunnel config, but you were talking about ssh right?. Then the terminal is the the right choice, obviously :) Have a look at this video explaining how to ssh using terminal: ua-cam.com/video/fNSf7D8CXgA/v-deo.html
first of all, thank you so much for your effort
but till this video I can't access the node-red flow\ dashboard remotely am I missing something?
if you set up a tunnel and can access the editor, you should be able to access the dashboard using the same path that you would use to access to it locally.
@@lu4t when i go to the same path it works localy but it doesn't work on another network
@@MAShams1 I don't get it: are you saying you can access the editor and NOT the /ui path?
@@lu4t so
If I'm connected to network x with nodered and from my phone connected to the same network x the nodered site opens but if I'm connected to network y from my phone it doesn't open
@@MAShams1 again, I don't understand the problem you are having. This video shows how to access a node-red instance from outside your lan. Once you set it us, you will get access from any devide.
very useful, could you show me how to create tunnel for access postgres DB host in raspberry pi
thanks for watching!
CreateProcessW failed error:2
posix_spawnp: No such file or directory
can you help me?
There are other videos on the channel showing how to use a ssh client.
i am unable to use ssh in termal but ssh in browser is working.
this video shows how to use ssh from terminal: ua-cam.com/video/fNSf7D8CXgA/v-deo.html
Sir, Can you help me onething I want to access my Home Pc using RDP Via ClousFlare Zero tunnel, but i cant access it, I can access 80 port or other port on web browser without port forrowarding but need to access RDP Windows 10, Can you help me Sir. Please.
you will need to proxy the rdp traffic, install one tunnel on each end. Watch this video: ua-cam.com/video/fNSf7D8CXgA/v-deo.html showing how to ssh proxing the traffic; for RDP would be an equivalent process (just different protocol / clients). Good luck!
@@lu4t this not helpfulle for me thank you
i don't know , it is working on the browser , but not on the terminal
you need to proxy the traffic from the terminal. Watch other videos on the channel showing how to do this.
the ssh access from terminal part is not working i tried everything as mentioned please help
for terminal access, try this video instead: ua-cam.com/video/fNSf7D8CXgA/v-deo.html
@@lu4t hello, in the current video you were able to ssh without any config on client end? is that possible?
the new video needs some config done on the client end right?
there are two methods: one using a terminal embedded on the browser, another using a ssh client (thick or terminal). The config needed on the client side depends on the type of ssh server you are using, and the type of ssh client you use. There no one-size-fits-all config.
@@lu4t is it possible to connect to ssh without cloudflared install just with url?
(if there is a tunnel url? with bypass mode?)
@@adityasher I guess you mean without cf tunnel on the client; yes, you can embed a terminal on a browser.
Is docker needed for this solution?
absolutely not, you can run a cf tunnel as a daemon on a RPi
Nice, and thanks for the fast response, in which cases would you recommend to dockerice your solution
@@borjaroca1262 in my very humble POV running a container load is always the first choice (if possible).
it keeps telling me password incorrect for ssh rendered. It accepts the one time passcode, but wont accept my user and password please help and i verified that my login info is correct
check usign the method explained on this video: ua-cam.com/video/fNSf7D8CXgA/v-deo.html
@@lu4t thank you I got it I deleted the ip address and added again after creating the application and it worked no problem
great!.