ReadMeFeed / Community knowledge
Real questions. Useful conversations. Find the people who know your stack.
An architecture note on using Cloudflare Tunnel and Access to expose internal HTTP services without opening inbound firewall ports, focusing on trust boundaries and failure modes.
Cloudflare Tunnel replaces inbound firewall exceptions with an outbound-only daemon. This post examines the architecture, a version-controlled replica setup, and the operational trade-offs before you commit.
I'm setting up Cloudflare Zero Trust in front of an internal admin tool served through a cloudflared tunnel, and I want most paths to require SSO login while a health‑check endpoint stays reachable without authentication. The Access policy types include Allow, Require, Block, and Bypass, and the documentation describes Bypass as letting matching traffic skip
cloudflare