Subcommands42 subcommands
cloudflared update
Update the agent if a new version exists
cloudflared version
Print the version
cloudflared proxy-dns
Run a DNS over HTTPS proxy server
cloudflared service
Manages the cloudflared launch agent
cloudflared service install
Install cloudflared as an user launch agent
cloudflared service uninstall
Uninstall the cloudflared launch agent
cloudflared service help
Shows a list of commands or help for one command
cloudflared help
Shows a list of commands or help for one command
cloudflared access
Cloudflare Access protects internal resources by securing, authenticating and monitoring access per-user and by application. With Cloudflare Access, only authenticated users with the required permissions are able to reach sensitive resources. The commands provided here allow you to interact with Access protected applications from the command line
cloudflared access login
The login subcommand initiates an authentication flow with your identity provider. The subcommand will launch a browser. For headless systems, a url is provided. Once authenticated with your identity provider, the login command will generate a JSON Web Token (JWT) scoped to your identity, the application you intend to reach, and valid for a session duration set by your administrator. cloudflared stores the token in local storage
cloudflared access curl
Uninstall the cloudflared launch agent
cloudflared access token
The token subcommand produces a JWT which can be used to authenticate requests
cloudflared access tcp
The tcp subcommand sends data over a proxy to the Cloudflare edge
cloudflared access rdp
The rdp subcommand sends data over a proxy to the Cloudflare edge
cloudflared access ssh
The ssh subcommand sends data over a proxy to the Cloudflare edge
cloudflared access smb
The smb subcommand sends data over a proxy to the Cloudflare edge
cloudflared access ssh-config
Prints an example configuration ~/.ssh/config
cloudflared access ssh-gen
Generates a short lived certificate for given hostname
cloudflared access help
Shows a list of commands or help for one command
cloudflared tunnel
Use Cloudflare Tunnel to expose private services to the Internet or to Cloudflare connected private users
cloudflared tunnel login
Generate a configuration file with your login details
cloudflared tunnel create
Creates a tunnel, registers it with Cloudflare edge and generates credential file used to run this tunnel. Use "cloudflared tunnel route" subcommand to map a DNS name to this tunnel and "cloudflared tunnel run" to start the connection
cloudflared tunnel route
The route command defines how Cloudflare will proxy requests to this tunnel
cloudflared tunnel route dns
Creates a DNS CNAME record hostname that points to the tunnel
cloudflared tunnel route lb
Creates Load Balancer with an origin pool that points to the tunnel
cloudflared tunnel route ip
Configure and query Cloudflare WARP routing to private IP networks made available through Cloudflare Tunnels
cloudflared tunnel route ip add
Add a new network to the routing table reachable via a Tunnel
cloudflared tunnel route ip show
Shows your organization private routing table. You can use flags to filter the results
cloudflared tunnel route ip delete
Delete a row from your organization's private routing table
cloudflared tunnel route ip get
Check which row of the routing table matches a given IP
cloudflared tunnel vnet
Configure and query virtual networks to manage private IP routes with overlapping IPs
cloudflared tunnel vnet add
Add a new virtual network to which IP routes can be attached
cloudflared tunnel vnet list
Lists the virtual networks based on the given filter flags
cloudflared tunnel vnet delete
Delete a virtual network
cloudflared tunnel vnet update
Update a virtual network
cloudflared tunnel run
Proxy a local web server by running the given tunnel
cloudflared tunnel list
Cloudflared tunnel list will display all active tunnels, their created time and associated connections
cloudflared tunnel info
Cloudflared tunnel info displays details about the active connectors for a given tunnel (identified by name or uuid)
cloudflared tunnel delete
Cloudflared tunnel delete will delete tunnels with the given tunnel UUIDs or names. A tunnel cannot be deleted if it has active connections. To delete the tunnel unconditionally, use -f flag
cloudflared tunnel cleanup
Delete connections for tunnels with the given UUIDs or names
cloudflared tunnel token
Fetch the credentials token for an existing tunnel (by name or UUID) that allows to run it
cloudflared tunnel help
Shows a list of commands or help for one command
