You can also do this using the Tor network, by setting up onion services.
SSH into private machines from anywhere using Cloudflare Tunnel
11–20 of 197 posts
Re: SSH into private machines from anywhere using Cloudflare Tunnel
#12Tailscale (https://tailscale.com) is a great solution for this use-case. It's also just an absolutely excellent experience overall and I can't say enough nice things about it.
Re: SSH into private machines from anywhere using Cloudflare Tunnel
#13Wow, that commenting system is so nice. I was looking for something like that! Amazing :)
Edit: it sees https://utteranc.es/ is used.
Re: SSH into private machines from anywhere using Cloudflare Tunnel
#14Unfortunately the cloudflared software, while the source is available on GitHub, and there are pull requests open and accepted for it, is not under an open source license, and the license it is under does not allow modifications, so any modifications (including the aformentioned pull requests) are contrary to the license and thus copyright law and thus illegal. The issue I filed about this is still waiting for action since October 2021.
Re: SSH into private machines from anywhere using Cloudflare Tunnel
#15If you like this, you’re gonna love Tailscale https://tailscale.com/
Re: SSH into private machines from anywhere using Cloudflare Tunnel
#16Wow, that commenting system is so nice. I was looking for something like that! Amazing :) Edit: it sees https://utteranc.es/ is used.
Correct link: https://utteranc.es/
Re: SSH into private machines from anywhere using Cloudflare Tunnel
#17Tailscale ( https://tailscale.com ) is a great solution for this use-case. It's also just an absolutely excellent experience overall and I can't say enough nice things about it.
Their documentation is excellent too.
Also worth mentioning the open-source derivative: https://github.com/juanfont/headscale
Re: SSH into private machines from anywhere using Cloudflare Tunnel
#18Tailscale ( https://tailscale.com ) is a great solution for this use-case. It's also just an absolutely excellent experience overall and I can't say enough nice things about it.
Can be used for the same, but serve kind of a different usecase.
Tailscale scan your host for all open ports and open a WireGuard connection between the installed machines. Like every machine is on the same network, even if they are not. Way harder to have a good access control compared to plain SSH. And you don't need extra SW for just SSH.
Re: SSH into private machines from anywhere using Cloudflare Tunnel
#19Unfortunately the cloudflared software, while the source is available on GitHub, and there are pull requests open and accepted for it, is not under an open source license, and the license it is under does not allow modifications, so any modifications (including the aformentioned pull requests) are contrary to the license and thus copyright law and thus illegal. The issue I filed about this is still waiting for action…
Thanks for pointing this out as it does appear even taking the source and applying a pull request ones self does break the license.
Just to clarify: many pull requests have been accepted and would thus from my perspective be covered by the license as having become part of the software.
Caveat: did not dig deeply enough to check if it's mostly Cloudflare employees developing publicly, etc.
Edit: worth mentioning here on HN customer support as well that 'opensource@cloudflare.com' is misconfigured.
Re: SSH into private machines from anywhere using Cloudflare Tunnel
#20Why would I use someone elses tool to just do the same thing I have autossh running (in a script that gets restarted if it dies) doing? You can do this if you own a server on the net, or with a free tier at AWS/GCE/Azure. I feel, not sure, "dirty"? pulling down some client that I am unsure exactly what it is doing from cloudflare just to enable a reverse ssh tunnel.