Cloudflare Tunnel

cloudflare Private endpointcloudflare-tunnel

Outbound-only cloudflared connector that publishes a private origin without inbound ports.

Provider: cloudflare
Kind: Private endpoint
Category: Edge
Official docs: https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-tunnel/
Also known as: Argo Tunnel

Properties · 2 set by this component

property	type	values	required	kind default	this component
approvalRequired	boolean	—	no	—	inherited
crossRegion	boolean	—	no	false	inherited
endpointCount	integer	—	no	—	inherited
managed	boolean	—	no	false	▸ true
managementMode · component property	enum	remotely-managed \| locally-managed	no	remotely-managed	inherited
outboundOnly · component property	boolean	—	no	true	inherited
privateDnsIntegration	boolean	—	no	—	inherited
publicAccessDisabled	boolean	—	no	—	▸ true

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "tunnel", component: "cloudflare-tunnel" }

Other Private endpoint products · 13

PrivateLinkalibaba-privatelinkalibabacloudprivate-link PrivateLink endpoint serviceaws-privatelink-serviceawsprivate-link AWS RTB Fabric gatewayaws-rtb-fabricawsprivate-link AWS PrivateLink VPC endpointaws-vpc-endpointawsprivate-link Azure Private Linkazure-private-linkazureprivate-link Workers VPCcloudflare-workers-vpccloudflareprivate-link Generic private endpointprivate-linkprivate-link Private Service Connectgoogle-private-service-connectgcpprivate-link Serverless VPC Access connectorgoogle-serverless-vpc-access-connectorgcpprivate-link Virtual Private Endpoint Gatewayibm-virtual-endpoint-gatewayibmprivate-link Private Endpointoci-private-endpointociprivate-link Service Gatewayoci-service-gatewayociprivate-link OUTSCALE Net access pointoutscale-net-access-pointoutscaleprivate-link

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# Cloudflare Tunnel: the cloudflared connector dials out to the Cloudflare network, so the origin
3# needs no inbound listener. "Cloudflare Tunnel" states you can block all inbound traffic; the
4# dashboard flow creates a remotely-managed tunnel.
5schemaVersion: "1"
6type: "component"
7id: "cloudflare-tunnel"
8kind: "private-link"
9provider: "cloudflare"
10docs: "https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-tunnel/"
11aliases: ["Argo Tunnel"]
12defaults:
13  managed: true
14  publicAccessDisabled: true
15properties:
16  managementMode:
17    type: "enum"
18    values: ["remotely-managed", "locally-managed"]
19    default: "remotely-managed"
20  outboundOnly:
21    type: "boolean"
22    default: true

The same page as markdown, for an agent: /catalogue/components/cloudflare-tunnel.md