gilangvperdana/README.md

## README.md

      
    Raw
  

              README.md
            
          
    General


Cloudflare build a Zero Trust feature for free to reverse our application (HTTP, TCP, SSH, etc) on-premise to Internet.
If you want to try this feature, at least you have a domain and manage it on Cloudflare then go to https://one.dash.cloudflare.com/

SSH


Assume you have point your server with agent
Assume domain is ssh.endpoint.com
For client, we must have an cloudflared tools, we can download from https://developers.cloudflare.com/cloudflare-one/connections/connect-apps/install-and-setup/installation/

Assume we put cloudflared on /usr/local/bin/ for linux
Assume we put cloudflared on D:\ for windows


for Linux

nano /root/.ssh/config

---
Host ssh.endpoint.com
ProxyCommand /usr/local/bin/cloudflared access ssh --hostname %h
User root
IdentityFile ~/.ssh/id_rsa
---

for Windows

## for Native Terminal
C:\Users\YourLaptop\.ssh\config

---
Host ssh.endpoint.com
  ProxyCommand D:\WHILE\cloudflared.exe access ssh --hostname %h
  User root
---


## for Putty
fill ssh.endpoint.com on Session then Go to Proxy -> Local -> Add Commandline below

---
D:\cloudflared.exe access ssh --hostname %host
---

## for Winscp
---
D:\\cloudflared.exe access ssh --hostname %host
---

Alternate SSH with Cloudflare Browser Rendering

We can simplify remote our server with GUI Based provided by Cloudflare, you can read more about short-lived certificates.
Reference


https://developers.cloudflare.com/cloudflare-one/connections/connect-apps/use_cases/ssh/#connect-to-ssh-server-with-cloudflared-access

TCP


Make sure you have set ednpoint with tcp connection on one.dash.cloudflare.com
Download cloudflared.exe
Execute this

.\cloudflared.exe access tcp --hostname your.site.com --url tcp://localhost:12232


localhost:12232 -> our reverse endpoint
You can change tcp with udp for your needs.

Connect to Private Network from WARP [Tested by me, it's work!]

We can use WARP to connect to our private subnet network just use WARP from Cloudflare, for reference you can use this :

https://developers.cloudflare.com/cloudflare-one/tutorials/warp-to-tunnel/
https://community.cloudflare.com/t/no-access-to-private-network-through-tunnel-using-warp/409954

Alternative


You can use Twingate for alternative Zero Trust with Cloudflare


## cloudflaretunnel.bat
@echo off
set /p connection_type=Insert Connection Type (tcp/udp/ssh):
set /p url_hostname=Insert URL Hostname (without http/https):
set /p reverse_endpoint=Insert Reverse Endpoint (tcp://localhost:123 // udp://localhost:123):

D:\cloudflared.exe access %connection_type% --hostname %url_hostname% --url %reverse_endpoint%
	@echo off
	set /p connection_type=Insert Connection Type (tcp/udp/ssh):
	set /p url_hostname=Insert URL Hostname (without http/https):
	set /p reverse_endpoint=Insert Reverse Endpoint (tcp://localhost:123 // udp://localhost:123):

	D:\cloudflared.exe access %connection_type% --hostname %url_hostname% --url %reverse_endpoint%