These connections allow traffic to flow between the host and the Cloudflare network, avoiding exposing the host to the global internet and therefore avoiding an attack surface. These connections are OUTBOUND only, so traffic can only go OUT from the host to Cloudflare. The way it works is that software called cloudflared is run on the host machine, that software will open up 4 connections to Cloudflare. Tunnels can be used for the following things Well, Cloudflare tunnels allow this to happen without exposing any IP address from your host. Imagine that you have an API on localhost:8080 and want it to be available for other people in the world on. I can now set up a database using docker, host it myself, and have as many services as I want, easily without any cloud infrastructure to set up.Ĭloudflare Tunnels Architecture - Image By CloudflareĬloudflare tunnels are a way to access a local resource on the big scary internet.
There is a privacy concern with Cloudflare Tunnels, they can see you’re applications traffic unencrypted unless you add your own TLS Happily, we can now leverage Cloudflare Tunnels, which makes all of this super easy, and the best part, for FREE. Also If you are not allowed by you’re ISP to be allocated a static IP that would require a WPS. Well, we can and always could, but it would require opening a port to my own network, exposing and risking my network to attacks. What if we would host it from home, on a Raspberry for instance? I have many small applications that I often thought that I should deploy, but I have stopped myself, I need to secure the cloud, set up infrastructure, create databases, and configure all the needed services.įor a simple web application all that can be too much for a small fun project. It can be a personal project that I run and running it locally is very easy, I can run databases in docker, etc, and it costs nothing but electricity. Recently I have been deploying everything to the Cloud, it is painless and very developer friendly.īut let’s be honest, sometimes I have small applications that I play around with. Exposing Localhost in a secure way on the Internet - by Percy Bolmér
0 kommentar(er)
