Skip to content

Set Up Cloudflare Tunnel – Server Without Open Ports

Cloudflare Tunnel (cloudflared): VPS behind tunnel, no port 80/443 needed, Zero Trust, multiple subdomains – copy-paste guide.

Domains & DNS

Quick answer: With Cloudflare Tunnel you reach your VPS over HTTPS without opening ports 80/443 – DDoS protection included.

Related

Webspace & domains: Order webspace · Register domain · nexorahost.com (Germany · Frankfurt · SSL included)

Frequently asked questions (FAQ)

What is Cloudflare Tunnel?
cloudflared builds an outbound connection to Cloudflare – your server needs no open HTTP ports. Traffic goes through Cloudflare CDN + DDoS protection.
Tunnel vs normal Cloudflare proxy?
Proxy: A record to server IP, ports 80/443 open. Tunnel: outbound only, IP can stay hidden, ideal for home server/VPS.
Is Cloudflare Tunnel free?
Yes for standard tunnels. Zero Trust features (access policies) have a generous free tier.
Tunnel with Docker?
Yes – cloudflare/cloudflared container with config.yml. Often combined with Traefik on internal network.
Downsides?
Dependency on Cloudflare. Slightly higher latency. Often unsuitable for game server UDP – HTTP/HTTPS/TCP only.

Keep reading

Popular and fresh – not just the oldest guides.

More

Explore NexoraHost