Core concept

No inbound ports. No firewall rules. Traffic reverse-tunneled.

Advertisement

How it works

Requires cloudflared running. Agent security matters.

Advertisement

Trade-offs + gotchas

Expose internal services publicly (with Access for auth). Home labs. Air-gapped internal apps.