# cloudflare/cloudflared

Cloudflare Tunnel client

Repository: https://github.com/cloudflare/cloudflared
Canonical: https://ross.abutalabs.com/products/cloudflared
Homepage: https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-tunnel/
Language: Go
License: Apache-2.0
License Family: permissive
Topics: cloudflare, reverse-proxy, cloudflare-tunnel, zero-trust-network-access
Last push: 2026-08-26T20:36:33+00:00

## Health v2 (maintenance only)
Score: 99/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 99, release rhythm 98, longevity 100
- inputs: {"age_days": 3246, "days_push": 7, "days_rel": 19, "gap_med": 13.0, "n_releases_24m": 43}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 15395, forks 1409 (observed 2026-08-28T04:11:09.771469+00:00)

## What it is
cloudflared is the command-line client and daemon for Cloudflare Tunnel, which creates outbound-only connections from your origin servers to Cloudflare's global network. It proxies traffic from Cloudflare to your origins (HTTP, SSH, RDP, and other TCP protocols) without requiring open firewall ports or a publicly routable IP address.

## Use cases
- expose a local web server to the internet without opening firewall ports
- replace a VPN with zero-trust private network access
- SSH into a home lab server behind NAT
- serve a self-hosted app through Cloudflare without a public IP
- proxy RDP or other TCP traffic through Cloudflare
- run a tunnel daemon in Docker to connect Kubernetes origins

## When to choose
- you want to publish services behind Cloudflare without exposing origin IPs or ports
- you need outbound-only connectivity so your origin stays firewalled
- you want a VPN replacement for private network access via Cloudflare Zero Trust
- you need cross-platform binaries, packages, or a Docker image for deployment

## When to avoid
- you need a tunnel without any Cloudflare account or domain on Cloudflare nameservers
- you want peer-to-peer tunneling independent of a vendor's network
- you need raw Layer 4 access without going through Cloudflare's edge

## Facets
- artifact type: cli-tool
- maturity: stable
- function: proxy, networking, security, http-server, ssh
- domain: networking, security, self-hosted, infrastructure-as-code
- platform: windows, cross-platform, cli
- tags: cloudflare-tunnel, reverse-proxy, zero-trust, tunneling, outbound-only, vpn-replacement, go, devops, linux, macos, docker

## Member repositories
- cloudflare/cloudflared (main) score 99

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:11:09.771469+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T17:05:55.555889+00:00, confidence not recorded.
  - readme: https://github.com/cloudflare/cloudflared (fetched 2026-08-28T04:11:09.771469+00:00, sha 941b35ce3225)
  - homepage: https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-tunnel/ (fetched 2026-08-29T08:04:11.999193+00:00, sha 49adc737db29)
  - site_page: https://developers.cloudflare.com/cloudflare-one/team-and-resources/devices/cloudflare-one-client/uninstall (fetched 2026-08-29T08:04:12.024168+00:00, sha fb510a67e1ef)
  - site_page: https://developers.cloudflare.com/cloudflare-one/team-and-resources/devices/cloudflare-one-client/download (fetched 2026-08-29T08:04:12.015202+00:00, sha 76389dce81ad)
  - site_page: https://developers.cloudflare.com/ (fetched 2026-08-29T08:04:12.009639+00:00, sha 1b8430a97c92)
  - site_page: https://developers.cloudflare.com/changelog (fetched 2026-08-29T08:04:12.012179+00:00, sha d22a1e616fbf)
  - site_page: https://developers.cloudflare.com/cloudflare-one/team-and-resources/devices/cloudflare-one-client/download/lts-releases (fetched 2026-08-29T08:04:12.018810+00:00, sha 4760f904bec0)
  - site_page: https://developers.cloudflare.com/cloudflare-one/team-and-resources/devices/cloudflare-one-client/download/beta-releases (fetched 2026-08-29T08:04:12.021081+00:00, sha 5faf41f02fe2)
  - site_page: https://developers.cloudflare.com/cloudflare-one/team-and-resources/devices/user-side-certificates/automated-deployment (fetched 2026-08-29T08:04:12.026044+00:00, sha e3b2b5293754)
  - site_page: https://developers.cloudflare.com/cloudflare-one/team-and-resources/devices/user-side-certificates/manual-deployment (fetched 2026-08-29T08:04:12.028624+00:00, sha a59504ff3914)
- Data as of 2026-08-30T08:39:29.467469+00:00.