SASE / Zero Trust
Cloudflare Tunnel review
Score: 9/10cloudflared might be the best free product in the whole lineup.
The breakdown explains the score. It is not an average. How to read these.
Last updated
Cloudflare Tunnel (cloudflared) creates outbound-only connections from your infrastructure to Cloudflare’s edge. Services need no open inbound ports and expose no origin IP to discover or attack. It is free and changes how you can publish internal services.
Replicas add high availability at no cost, and remote configuration removes the need to SSH into hosts to update ingress rules. Pair Tunnel with Access and you can put authentication in front of a development box, router UI, or internal dashboard in minutes.
The missing point is for operational quirks: the local-config vs remote-config split still confuses people, connector version upgrades occasionally change behavior, and debugging a misbehaving tunnel through its logs is an acquired skill.
Status page incidents
Published under Tunnel, plus incidents whose title names it.
- Last 3 years
- 29
- 6 from the title
- Major or critical
- 6
- Median time open
- 2.1 h
- Since January 2019
- 100
Counts what Cloudflare published, not what broke: time open is how long the status entry stayed open, and nothing before January 2019 is tracked at all. Incidents Cloudflare tagged against nothing but named in the title are counted too. The caveats in full.