How to setup Cloudflare Tunnel in Magento 2

Tanya Garg

7 June 2022

When you set up a server on the internet, it becomes an instant target for various attacks by internet bots.

Cloudflare Tunnel is a simpler and more secure solution to protect your apps and web servers from direct attacks.

What is a Cloudflare Tunnel?

A Cloudflare tunnel means “a private connection between your web resources(webserver) and Cloudflare”.

Only traffic that goes through Cloudflare can reach your server through the tunnel.

To put it another way, it’s a secure connection. Only Cloudflare can view and communicate with the server; it is unroutable for the rest of the internet as if the server does not exist.

Users can use Tunnel to make a private connection from their origin server to Cloudflare without using a publicly routable IP address.

Instead, this secure connection is built by running cloudflared, a lightweight daemon on your origin that generates a secure, outbound-only connection. Only traffic that passes through Cloudflare will be able to reach your origin.

GRE Tunnel

GRE tunnels were utilized in the past for this type of private deployment. It is a data-transfer protocol that simulates a physical connection between two servers.

Network administrators on both sides of the link must work together to configure a GRE tunnel. It’s an expensive service that’s usually only available to big businesses with big expenditures.

They wanted to figure out a way to get the same level of security as a GRE tunnel without the cost or effort. And with that instruction, their team began construction on the Tunnel.

For more details about GRE tunnel, please refer to – GRE Tunneling.

Zero trust Security – Trust No one!

Traditional IT network security assumes that everyone and everything on the network is trustworthy. Nothing and no one is trusted in a Zero Trust architecture.

Zero Trust security is an IT security approach that involves tight identity verification for everyone who wants to access resources on a private network, whether inside or outside the network perimeter.

Benefits of using Cloudflare Tunnel

Here we have the following benefits of using the Cloudflare tunnel –

To protect your web applications from attacks, Tunnel integrates with DDoS Protection and Web Application Firewall (WAF).
It allows you to easily secure and encrypt application traffic to any sort of infrastructure, allowing you to hide your web server IP addresses, block direct attacks, and get back to providing fantastic services.
Tunnel enables you to easily deploy infrastructure in a Zero Trust environment, ensuring that all requests to your resources are routed through Cloudflare’s advanced security filters.
Through Cloudflare’s network, applications that were previously accessible to anybody via the origin IP are now only accessible to authenticated users.

How Cloudflare Tunnel works

Cloudflare Tunnel establishes a connection between your infrastructure and Cloudflare.

A lightweight connector(Cloudflared) that your team operates in your environment, allows services to reach Cloudflare and your customers via an outbound-only connection, bypassing the need to open holes in your firewall.

Cloudflared establishes outbound connections (tunnels) between your resources and the Cloudflare edge. Tunnels are persistent objects that use DNS records to redirect traffic.

You can run as many cloudflared processes (connectors) as you need within the same tunnel. These processes will connect to the Cloudflare edge and send traffic to the Cloudflare data center closest to you.

You can check the status of your tunnels and get a comprehensive list of active and inactive tunnels once your first tunnel is connected to Cloudflare.

You can also filter tunnels by name, status, uptime, or creation date, and search for tunnels by name using the search bar.

Tunnel Status

The status of the tunnel depends on the heath of its connections –

Active – This indicates that your tunnel is running and connected to the Cloudflare network.
Inactive – This indicates that your tunnel is not running and not connected to the Cloudflare network.

How to create your First Tunnel?

You can follow the below steps to create your first Tunnel –

Step 1 – Log in to Cloudflare and then navigates to ‘Zero Trust’.

Step 2 – Assign a ‘unique team name’ to create a unique name for your Cloudflare account.

Step 3 – Now, you have to choose a plan for your Cloudflare account, here we are choosing a free Plan.

Step 4 – After choosing a plan, proceed further.

Step 5 – Before proceeding further, Please ‘Accept all terms and conditions.

Step 6 – Then, Under Cloudflare Zero trust, scroll down to Access and then go to Tunnels.

Here, you will create your first tunnel by clicking on ‘Create a Tunnel’.

Step 7 – In order to create a tunnel, you need to use a name for your tunnel. And then click on ‘Save tunnel’.

We suggest you, choose a name that will show you the type of resources you want to connect through this tunnel.

Step 8 – Next, you need to install Cloudflared, in order to do so you need to ‘choose your environment’ which means you need to choose the Operating system on your machine.

Then after running the command, choose Next to proceed further.

Step 9: Connect Application – In order to connect your application, you need to add a public hostname under the Public hostname section.

Step 10 – Here you need to add your subdomain or domain and path details.

Other than these, you need to specify Service details also like – https://localhost:8000.

Step 11 – Under its Additional settings, you can certain parameters like HTTP and connection settings that you want to add to your tunnel configurations.

Then you can save your settings.

Step 12: Connect Network – In order to connect a network, add your private network here.

Step 13 – Here Add either an IP address or CIRD(Classless Inter-Domain Routing) to add a private network then Save your details.

Step 14 – Once you will add all the required configurations, here you may check for tunnel status.

If you have added all the required details then your tunnel status will be Active.

In this way, you can create Your Cloudflare tunnel.

For further details about Cloudflare Tunnel, please refer to – https://www.cloudflare.com/en-gb/products/tunnel/

Conclusion

Cloudflare began as a simple way to handle DNS and obtain SSL, and then they gradually expanded their services. In this blog, we have discussed the Cloudflare tunnel.

In the further blog, we will learn about Zero Trust Security.