Cloudflare Tunnel Setup Guide - Self-Hosting for EVERYONE

Поділитися
Вставка

КОМЕНТАРІ • 301

  • @treborbones
    @treborbones Рік тому +4

    Thanks so much for this! I was banging my head against the wall going through the Cloudflare docs, and within 15 minutes I had it going thanks to you!

  • @acc3366
    @acc3366 2 роки тому +6

    I could not find a solution that worked for me until your video. You took the ouch out of pain. Thanks...Great video!

  • @leopold7562
    @leopold7562 2 роки тому +9

    I've been using Cloudflare for a while now and have a static public IP which has made things a bit easier, but I've had to do all my routing using reverse proxy and having port 443 open, which I'm not overly keen on and sometimes it doesn't work properly. I'd tried the tunnel, with absolutely zero success. But having watched your video, I can not only see where I was going wrong, but I can also now see how to use multiple services over the same tunnel! Thank you so much for explaining it in such a way as to make me think, "Yeah, that's really easy, is that."

  • @siddharthchordiya
    @siddharthchordiya 2 роки тому +23

    Its Nice to see that we get to see two Creators in One Video :
    1. Brett Himself a.k.a Raid Owl
    2. Jeff from Craft Computing (Looking at his t-shirt)
    Looks like you are also on the way to become a Homelab Nerd just like him

    • @RaidOwl
      @RaidOwl  2 роки тому +10

      “Welcome to Raid Owl, as always I’m Brett”

    • @shawncampbell700
      @shawncampbell700 2 роки тому

      @@RaidOwl Put a trademark on it and MAKE Jeff notice you. Lol

    • @ArifKamaruzaman
      @ArifKamaruzaman 2 роки тому

      I got confused for a sec seeing Craft Computing, wheres the beer.
      hahaha.

  • @KBlakK
    @KBlakK Рік тому

    Love your content. Your sense of humor keeps me engaged but your knowledge is impeccable

  • @sharvinzlife
    @sharvinzlife 2 роки тому +4

    Thanks 😍
    I'm under CG-NAT. I was using Ngork, Tailscale and all, never had a detailed video of Cloudflared tunnel set on UA-cam. This is perfect thanks a lot.😍

    • @angeloerasto
      @angeloerasto 2 роки тому

      What is the latency like?

    • @majorgear1021
      @majorgear1021 2 роки тому

      Remember - If a product is free, then you are the product being sold.

  • @tw4093
    @tw4093 2 роки тому +7

    Followed along and got two of my services running! Awesome how to! It's a real life saver having moved to an ISP that is using CGNAT (starlink).

    • @BustinCasts
      @BustinCasts 2 роки тому

      I'm in the same boat with the same ISP. Up until finding this video I've been using a Hoppy connection (Wireguard Tunnel from VPS). While it fits the bill and works, I'm excited to give this a shot next. I'm kind of disappointed it only took me 8 months after he put this out there to find this video. lol

  • @leocode128
    @leocode128 2 роки тому +1

    This video is soooo important for me as i want to access my services from anywhere but buying a static public ip costs quite a lot

  • @Grs-im93
    @Grs-im93 10 місяців тому

    Man, you are a God´s bless! I was giving up of my umbrel because of this.. Thank you so much, cheers from Brazil!

  • @phobes
    @phobes 2 роки тому +2

    Oh. My. God.
    This is a billion times easier, and probably way more secure, than running a reverse proxy. Thank you!

  • @reidcardwell
    @reidcardwell Рік тому

    Great walk-through! Some of the menus have changed a little, but everything still works exactly as in this video. Thanks!

  • @peterg4527
    @peterg4527 2 роки тому +5

    Awesome Video I love these types of videos ! Loving your self-hosting series of videos keep up the great work your channel made my top 5 must watch list for Tech

  • @mattiashedman8845
    @mattiashedman8845 2 роки тому +13

    Finally a video that made sense! Without knowing it you did point out a few things I had missed! And the best part, I can now get rid of that monthly $5 fee for a public IP! Thank you! I do hope you take this another step and talk about WARP as well, and how to reach your LAN when your not at home, thus this also replaces my home VPN setup. :)

    • @aagm.
      @aagm. 2 роки тому +2

      Tailscale

    • @BustinCasts
      @BustinCasts 2 роки тому

      @@aagm. nailed it. Tailscale is freaking awesome. 20 devices with a free account, can't be beaten in my opinion. I use it everyday. It's actually my route back into my BlueIris box to check my cameras while I'm away from home. Stupid simple to use.

    • @ryklebaron
      @ryklebaron 2 роки тому

      @@aagm. same here

  • @karlos-oliveira
    @karlos-oliveira 2 роки тому

    congrats from Brazil man, your video is just what i was looking for, thanks!!!

  • @henloitsdiego
    @henloitsdiego Рік тому

    i have been struggling for weeks trying to get tunnels to work on my home lab. I followed your instructions (or so i thought) and it didn't work I had to triple check every single command i ran but after 4 containers and 6 VMs, i have finally set it up thanks to you!

  • @marioalbertoestrella
    @marioalbertoestrella 2 роки тому

    Thanks a lot very straightforward, after 12 hours of banging my head against Cloudflare five minutes after watching your video I have everything running

  • @hajdaniel5778
    @hajdaniel5778 9 місяців тому

    It worked, finnally, I've been trying for a moth now to set up a web server, thank youuuu

  • @DamienLee69
    @DamienLee69 2 роки тому

    What seemed like reading and watching the entire internet of tutorials, even the for dummies ones and getting stuck on this step or that, THIS finally worked!! Almost as easily as I thought it should! I had to make changes, being on windows and I did run into errors for sure. One being that if I pointed to "localhost" it went to a completely different app, so i started over and used my machines IP instead and eventually..voila! Even added an extra app so i knew i could recreate it if i wanted! Thak you so much!

  • @Vivek-mv9di
    @Vivek-mv9di 2 роки тому +3

    Followed this and got this up and running. Thanks so much for this tutorial :)

  • @KenPryor
    @KenPryor 2 роки тому

    Thank you so much for this video! I've been going crazy trying to figure out how to get around the CG-NAT and this did the trick.

  • @JamesT65
    @JamesT65 2 роки тому

    This is a great tutorial on cloudflared. If anyone has any issues with the site showing can’t provide a secure connection or ssl issues in the browser in general. you have to enable universal SSL and it will all magically work with no SSL issues.

  • @nightmarenova6748
    @nightmarenova6748 2 роки тому

    i got a domain and i was soo dissapointed that my ddns wouldnt work properly !!! Thank you soooo much for this , i can access it now from different external ip's as well

  • @it-expat-china
    @it-expat-china 2 роки тому

    Get this working on my first try (use my pi-hole server as the lab rat), extremely helpful tutorial. Many thanks Brett.

  • @Clarence-Homelab
    @Clarence-Homelab 2 роки тому

    Brett bringing out those videos hot & fast. F* Yeah!
    Great content, dude.

  • @andreleblanc5057
    @andreleblanc5057 2 роки тому

    Finally you explain what I needed since a year !!!! Thanks!

  • @fourmobro6214
    @fourmobro6214 2 роки тому +6

    Great video. Here are some quick follow up questions:
    1. If this hosted/external service is currently proxied via HA-proxy in pfSense, should it be removed?
    2. Are you still using HA-Proxy for any hosted/external services? If so, which?
    3. Have you successfully used this tunnel process to expose your self-hosted bitwarden? Any issues?
    4. This method should eliminate the need for running cloudflare_ddns to keep our changing public IP address in sync with Cloudflare, correct?

  • @123djek
    @123djek 2 роки тому

    Thanks!

  • @PeterBatah
    @PeterBatah 2 роки тому +3

    Excellent presentation. Clear and precise. Thank you for sharing your time and knowledge with us.

  • @joshuamaserow
    @joshuamaserow 2 роки тому

    Dude, loving your channel!

  • @chromosome24
    @chromosome24 2 роки тому

    "its free" - for now :)
    Great tut btw. The documentation was spiking my blood pressure, so thx!!

  • @SeanAnthony
    @SeanAnthony 2 роки тому +6

    Good video, but I must say doing this through the CLI is way more confusing than using the Cloudflare GUI. I was also able to use the GUI restrict access and to setup authenication. However there is always more than one way to skin a kat. :) Thanks for the work you put into this videos.

    • @vap1777
      @vap1777 2 роки тому +1

      the CLI was the only way for a while lol

  • @LostOnTheLine
    @LostOnTheLine 2 роки тому

    Watching this again while looking for something that I saw mentioned somewhere, & I wanted to clarify that I enjoy your videos & thank you for providing this information
    I also wanna note that Smart Fridges are generally Linux systems... So you probably COULD run cloudflared on a Smart Fridge

  • @willrun4fun
    @willrun4fun Рік тому

    Since I'm on a NAT IP this might finally be the guide I needed to get a few game servers and services going. I also need to setup pfsense first and make some dmz vlans.

  • @calotreze
    @calotreze 2 роки тому

    Dude!!! Awesome vid, I just discovered this existed. Thank you!

  • @coryvassaux
    @coryvassaux 2 роки тому

    Thanks for this video! Helped get a couple of my services online and subscribed to the channel!

  • @Theeporkchopexpress
    @Theeporkchopexpress 2 роки тому

    This is amazing, I know what I'm working on this weekend! Great video!

  • @mitchross2852
    @mitchross2852 2 роки тому

    Thanks dude! This really helped me out I was stuck af. I had prior experience with cloudflared, but they changed some stuff.

  • @tigeroats913
    @tigeroats913 2 роки тому

    i tried this once but it didnt work well but i tried this now and it works great, and i dont even have an ssh certificate and its secure so this is like awesome

  • @techaddressed
    @techaddressed 2 роки тому

    Great video! I have a nginx setup on a cloud provider anyway, so I'm using it as a reverse proxy with Zerotier providing direct access to my internal systems. Same end result - no firewall openings required.

  • @Glatze603
    @Glatze603 2 роки тому

    That´s really awesome - vaultwarden now runs on an ubuntu server in my local dmz behind a cgnat, without a reverse proxy and without a piblic ip. I do not need my cloud server any more for a wireguard tunnel between my ubuntu server and this vps for running nginx-proxy-manager with certbot. That´s a really great and more secure solution than everything eles I know till now. Thanks for this inovation!

    • @Glatze603
      @Glatze603 2 роки тому

      Is it possible to use nginx with further apps with this technic/method? I would like to use authelia for some apps though cloudflare tunnel, but don´t know how to configure. Maybe someone can give a tipp? I saw a video from IBRACORP, but that didn´t work?!? Thank´s a lot 🙂

    • @Glatze603
      @Glatze603 2 роки тому

      I love cloudflared, because I don´t have a public IP (cgnat!). With cloudflared I have a fantastic solution for my cgnat-problem, but I need authelia, because most apps need 2fa. So the question is, how could this be configured? I already know how to work with npm and authelia and I am able to use cloudflared, but I don´t know how to combine both?!? If you know, please explain, thanks :-)

    • @Glatze603
      @Glatze603 2 роки тому +1

      Ok, I got it working perfectly with Cloudflare Zero Trust Applications - no further need of nginx proxy manager 😎😁👍

  • @sillycoda1084
    @sillycoda1084 2 роки тому

    I JUST FINISHED THIS END TO END AND SETUP MY OWN DOMAIN AND I FEEL LIKE CRYING WITH HAPPINESS

    • @sillycoda1084
      @sillycoda1084 2 роки тому

      mark my words, you're at the cusp of what Linus Tech Tips was as a channel around 10 years ago, but in a completely new field that didn't exist then.. back then it was all about using hardware for just gaming, but now that we're grown up and AAA games suck donkey poo, so instead spend time focusing on taking a step beyond what you can do with the new hardware you just bought.. this is EXACTLY what students and passionate people need.. THANK YOU SOO MUCH AGAIN

    • @majorgear1021
      @majorgear1021 2 роки тому +1

      did you really need to shout that ? caps lock keys should be removed from all keyboards.

  • @cocidy
    @cocidy 2 роки тому

    Holy shit thank you!! I work from CGNAT and cant get a public ip yet, but this helped!

  • @thebeatconnect1
    @thebeatconnect1 2 роки тому

    I managed to set up a cloudflare tunnel last week. And it's been really helpful, I can spin up containers and VMs and just create a subdomain and use Nginx Proxy manager to do a reverse proxy. Within 5min my services are exposed, with SSL.

  • @jaxwylde2139
    @jaxwylde2139 2 роки тому +6

    Another excellent how-to. If you're looking for more content, you may want to consider doing an update. Cloudflare has deprecated Tunnels, and replaced with Zero-trust. I know they're the same thing (just different branding on their part). Now the dashboard setup (vs cli) is much easier and quicker to setup and manage.

    • @JamesGriffin-x4w
      @JamesGriffin-x4w Рік тому

      You can't do RDP in the dashboard though which is the worst part. Or SSH I believe. Maybe you can SSH but if you want any kind of graphics you got to do the CLI. I struggled through it for weeks until I finally got it working.

  • @kritterkult1318
    @kritterkult1318 2 роки тому

    It's hopeless hosting inbound connections on a home system. Internet providers seem to frown upon that since they are selling you the download bandwidth, and selling businesses the upload bandwidth. That's why your upload speed is less than download. The external IP address my router says I'm at, is not reachable from the Internet. The dynamic IP address also makes self hosting unreliable because it takes a while for a dynamic DNS to take effect if your address changes, and in that time your website will fail for users. A reverse tunnel solves all this and is a slam dunk obvious solution.

  • @habteadbaru7768
    @habteadbaru7768 2 роки тому

    Thanks for an amazing video, I'm definitely going to try this weekend

  • @DrCJones
    @DrCJones 8 місяців тому

    I love your fancy website! 1:51

  • @DaviAreias
    @DaviAreias 2 роки тому

    This just saved me months of lifetime, no more waiting hours because Ngrok timed out or localtunnel decided to change the server name :D

  • @KevinWhiteJr
    @KevinWhiteJr 2 роки тому +3

    Great thing about using Tunnels is that you can run multiple tunnels from different machines. I am playing with Zero Trust for authentication purposes. This will allow me to lock my services behind an IdP, such as Google. Great video!

    • @skoal6879
      @skoal6879 2 роки тому +1

      This is my next question how to lock it down after exposing it so only I have access.

    • @KevinWhiteJr
      @KevinWhiteJr 2 роки тому +2

      @@skoal6879 I have Google Workspace setup as an IDP. I have all my services using that as the authentication method through policies. I then have a bypass for any traffic coming from my external IP address. I also use WARP to access my home network when I am away from home.

  • @Shubham_Gupta_ji
    @Shubham_Gupta_ji 2 роки тому +1

    Very helpful video sir 👍. Please make a video on how to set up ftp server using cloudflared tunnelling ..

  • @pepper5105
    @pepper5105 2 роки тому

    that was quick. i asked about this 2 days ago. thanks my man.

    • @RaidOwl
      @RaidOwl  2 роки тому +3

      Gotta give the people what they want lol

  • @trump1688
    @trump1688 Рік тому

    This is really helpful, thank you for your sharing! 👍

  • @crowlsyong
    @crowlsyong 2 роки тому

    im so glad this exists.

  • @n0madtv
    @n0madtv 2 роки тому +1

    The traditional way to get around not having a static IP is to use dynamic hostname providers. A lot of people might not know, but cloudflare also supports dynamic IP's... Just saying, you can get around the CG NAT with a hostname. Tunnels are better for security and privacy purposes.

    • @mohdsyukrihashim2299
      @mohdsyukrihashim2299 2 роки тому

      could you explain further?if im using duckdns,can it be used with cloudflare?

  • @CRK1918
    @CRK1918 2 роки тому +1

    Very good video. I don't need this myself, but it's useful for those people who live in apartments. Do you remember any other services besides this? Because we give too much power for Cloudflare in controlled.

  • @leesweets4110
    @leesweets4110 2 роки тому

    Total lifesaver. Cant find out how to do this anywhere else.

  • @nishantpiano
    @nishantpiano 2 роки тому

    Brilliant video! Thanks for the tips

  • @AmrBedair
    @AmrBedair 2 роки тому

    You solved my exact problem .. really thank you

  • @kenRowe-p4x
    @kenRowe-p4x 11 місяців тому

    Great info. Thanks so much!

  • @JosePerez-bd1we
    @JosePerez-bd1we 2 роки тому +1

    "I am using nano, fite me", best line

  • @mahdimuhib
    @mahdimuhib 2 роки тому

    thank you so much. this worked great

  • @niyazniyazov
    @niyazniyazov 2 роки тому

    Thankssss !!! Very very very much !!! Exellent jobç you saved me !!

  • @secretbaboy
    @secretbaboy 2 роки тому +2

    Please do a guide for WARP VPN with no split tunnel in order to access your home network without needing ingress rules.

  • @gadgetb0y
    @gadgetb0y 2 роки тому

    Thanks so much for this!

  • @Nooby427
    @Nooby427 Рік тому +2

    I did everything in the video the I can get a secure connection, but then I get the error that there were too many redirects. I have searched everywhere and I can't find a fix. I'm trying to access my HP servers iLO3 this way.

  • @johngotek
    @johngotek 2 роки тому +1

    Wow thanks it works on my nat vps server

  • @michaels5167
    @michaels5167 2 роки тому +3

    By chance do you have an updated video of guide on this? The docs and setup appear to have changed significantly since March.

  • @jacobbiancardi9153
    @jacobbiancardi9153 2 роки тому +1

    Also make sure your architecture is correct. None of the downloads for Debian work with 32 bit lite. Hopefully they add support in the future.

  • @CraftBlack
    @CraftBlack 2 роки тому +1

    How make Minecraft java localhost play with friends in Cloudflare Tunnel?

  • @bhedavivek
    @bhedavivek 2 роки тому

    "I'm using nano, fight me" - love it 🤣. Use the tools that work for you folks

  • @adamyork2333
    @adamyork2333 2 роки тому +1

    Awesomeness!

  • @gswhite
    @gswhite 2 роки тому +1

    Brilliant overview and walk through guide. However after following instruction and checking repeatedly I still get the following error???
    ERR Couldn't start tunnel error=" is an invalid address, please make sure it has a scheme and a hostname"

    • @RaidOwl
      @RaidOwl  2 роки тому

      Sounds like a typo in your config file somewhere or in your ingress

    • @gswhite
      @gswhite 2 роки тому

      @@RaidOwl indeed it was good tip thanks :)

  • @KaiserSakhi-1
    @KaiserSakhi-1 Рік тому

    Helpful, thanks!

  • @nixxblikka
    @nixxblikka 2 роки тому

    Wow really easy! Nice video!

  • @MemoriesEternally
    @MemoriesEternally Місяць тому

    Love your videos.
    I'm currently trying to connect a tunnel, but my setup is slightly more complex than most. I'm running Nextcloud on Ubuntu-24.04, on WSL, on Windows 10. I pretty sure I'm behind gnat/cnat/lol, as my devices are in the 192.168 range. Before finding your video I've tried all but the right variation to connect my Nextcloud instance. From my understanding I need to point my tunnel (or DNS record?) at my public ip address, and point another tunnel (subdomain) at my Nextcloud server?

  • @ChrisDePasqualeNJ
    @ChrisDePasqualeNJ 2 роки тому

    First - Excellent UA-cam Channel. Did you really quick your day job to do UA-cam? Kudos to your vidio editor too. 🙂 My question is. I currently expose a random port on my firewall and then use Cloudflare Origin rule to rewrite 443 to the random rule that I have open on my firewall - then port Forward from random port to 443 to my Nginx proxy server. And now for the question. With CloudflarD Tunnels, do I still need Nginx? Cuz the last two times I installed this on my Docker it broke my RPI. Thank you and keep up the good work.
    Chris

    • @RaidOwl
      @RaidOwl  2 роки тому

      Hi there! Nah I currently still work a full time job and do all my own editing haha. For the tunnels you done need Nginx but it could make it easier if you don’t wanna set up Ingress rules and deal with ssl through the tunnel.

  • @adamyork2333
    @adamyork2333 2 роки тому +5

    Question. What are the repercussions of using noTLSVerify? I'm wondering how safe this is. Does that open up the possibility of some kind of man in the middle attack? Is it possible to use a free SSL certificate from Cloudflare? Thanks for the video!

    • @deafno
      @deafno 2 роки тому +2

      I think doing TLS through cloudflared tunnel is redundant and not necessary. Better to save cpu cycles and the headache of self signed certs and let cloudflare connect to HTTP instead of HTTPS over already encryped tunnel. HTTPS is necessary if you don't use cloudflared tunnel.

  • @The1neo34
    @The1neo34 2 роки тому

    "Im using nano, fight me" 10/10

  • @antoninoromeo4015
    @antoninoromeo4015 2 роки тому

    Cool!!! it works great!! many thanks

  • @timdekruijf
    @timdekruijf 2 роки тому

    This is awesome!

  • @210Artemka
    @210Artemka 2 роки тому +1

    I have followed the guide, but I still getting a 502 after adding "noTLSVerify" rule. Does anyone have any idea why it may happen?

  • @andreibirsan4541
    @andreibirsan4541 2 роки тому

    Good stuff!!

  • @vasquezmi
    @vasquezmi 2 роки тому +1

    CF is a good option but I don't want to use another cloud based entity as my identity provider (Google, GitHub, Okta..). I would like to leverage the user level function similar to Open VPN. Thoughts on how to integration this CF Tunnel with User based that I control?

  • @paulo.valverde
    @paulo.valverde 11 місяців тому

    Thanks for this! I have a newbie question: Would you be able to connect from outside your network with this? For example, if you’re hosting Nextcloud and want to access from another city. Or did you you have to use a VPN?
    Thanks again!

  • @bwalamadumark2273
    @bwalamadumark2273 2 роки тому

    this is so good.... great tutorial.....

  • @garypaulson5202
    @garypaulson5202 2 роки тому

    This is great, thanks!

  • @misubear
    @misubear 2 роки тому

    Good video!

  • @DoctorMGL
    @DoctorMGL 2 роки тому

    could you make a video on how to create this using the GUI because i don't like typing all that much of gibberish to get it done !

  • @copykon
    @copykon 2 роки тому +1

    I'm learning this now lol

  • @nixxblikka
    @nixxblikka 2 роки тому

    Oh reading my mind what I wanted to get in next

    • @RaidOwl
      @RaidOwl  2 роки тому +1

      I have super powers 😳

  • @jeanburgos3416
    @jeanburgos3416 9 місяців тому

    Question, how much of your instenet speed is lost while setting up these type of tunnels? (headers and what not) I have watch some of your other videos, but I think I missed it if you showed it. I would love to see the difference on an IPERF test. Thank you for the indept videos.

  • @jamesa4958
    @jamesa4958 2 роки тому +1

    Awesome Thank you

  • @LuisSanchez-yi3rl
    @LuisSanchez-yi3rl Рік тому

    Excellent, I have a question. Can I do something similar for iredmail? I want to use the same tunnel I have already done it for iredmail. Thank You and Best regards.

  • @dlengelkes
    @dlengelkes 2 роки тому

    Excellent information but how would I create a ssh tunnel to an esxi server?

  • @SavannahTL
    @SavannahTL 2 роки тому

    solid info. 👍

  • @Rohambili
    @Rohambili 2 роки тому

    Now you can install wia apt get...
    if you add the repo.
    Can you talk about how to tunneling ssh in the near future? Thats seems a bit complicated to me...

  • @harrychristianx
    @harrychristianx 2 роки тому

    Thank you!!

  • @vulcanolog0
    @vulcanolog0 2 роки тому

    great content thank you!! how do i connect this tunnel to my postgres container? havent make it work so far

  • @automaestro1611
    @automaestro1611 Рік тому

    Thank you very much we appreciate your time and effort. From where you got the 10.0.0.26:9444 for the ingress? I'm also facing an error "unable to reach the origin service" what could be the issue and it's resolution?

  • @vishal.jadhav.00
    @vishal.jadhav.00 2 роки тому +1

    Great video! Does single dashboard subdomain works for all the services available in Hiemdall dashboard or each service require separate subdomain configuration?

    • @Nur__
      @Nur__ 2 роки тому

      I have the same question, might have to try it out to see