Cloudflare Tunnel

Cloudflare Tunnel provides public access to your slave server without opening ports.

Why Tunnel?

• Slave might be behind NAT/firewall
• No need for public IP or port forwarding
• Secure encrypted connection
• Instant failover (no DNS propagation for tunnel itself)

How It Works

1. cloudflared service runs on slave
2. Creates outbound connection to Cloudflare
3. Cloudflare routes traffic through tunnel
4. During failover, DNS points to tunnel-id.cfargotunnel.com

Setup

Tunnel is configured automatically during slave installation:

1. Browser OAuth with Cloudflare
2. Tunnel created and registered
3. Service installed and started

Monitoring

Dashboard shows:

• Tunnel status (healthy/unhealthy)
• Connection status
• Last health check time