Earlier quoted context omitted.
This seems to be the license for cloudflared. But when you use cloudflared to create a tunnel via cloudflare network, aren't you also bound to Cloudflare's ToS because the software itself is useless without using the service provided by Cloudflare?
I am literally Cloudflare's CTO. I'm pretty sure I know that using Cloudflare Tunnel for SSH isn't a violation of our service.
SSH into private machines from anywhere using Cloudflare Tunnel
101–110 of 197 posts
Re: SSH into private machines from anywhere using Cloudflare Tunnel
#102Earlier quoted context omitted.
This seems to be the license for cloudflared. But when you use cloudflared to create a tunnel via cloudflare network, aren't you also bound to Cloudflare's ToS because the software itself is useless without using the service provided by Cloudflare?
I am literally Cloudflare's CTO. I'm pretty sure I know that using Cloudflare Tunnel for SSH isn't a violation of our service.
This was my assumption as well given the tutorials and such available on your site. I was confused though and so reached out for clarification.
Re: SSH into private machines from anywhere using Cloudflare Tunnel
#103Earlier quoted context omitted.
Please explain? I've googled your sentiment and have found some links but not many answers. Breaking a contract is just as illegal (~ against the law) as breaking the law? This follows trivially from contract law being a part of law. More substantive: Both contracts and laws proscribe actions. One can find remedy for breaking either via the legal system. (Obviously the severity of punishment can differ several orders…
> This follows trivially from contract law being a part of law That does not follow trivially. Contracts themselves are not articles of contract law.
'Illegal' ~ 'against the law'. What is doing something against the law? Doing something the law states you are not allowed to do. So in practice under continental law (Napoleonic / Germanic) a law states "do X" or "leave Y" and doing the opposite is illegal. Then, if the law states "you must (under good faith) fulfill your contract" and you do not fulfill your contract ... that's illegal. A legally binding contract has the force of law for the signing parties.
Re: SSH into private machines from anywhere using Cloudflare Tunnel
#104Re: SSH into private machines from anywhere using Cloudflare Tunnel
#105Earlier quoted context omitted.
Same, zerotier on everything. Router, laptops, servers, phone. It makes things very easy to connect without public addresses.
I want to love ZeroTier, but after wanting to contribute and reading some code I decided I'd rather use another VPN tech. Not saying it isn't good, but it was very incomprehensible and didn't look modern and nice, which the product should be.
Re: SSH into private machines from anywhere using Cloudflare Tunnel
#106> Each port is also limited to a single machine, so you'd have to choose a different port for a different machine. I would probably set up one gateway machine, and then from that machine log into other machines on the network; instead of exposing them all to the Internet. SSH allows you to chain logins thus: ssh -A -t user@public-gateway ssh -A -t user2@server-behind-dmz It's a lot less work to lock down one machine…
ServerAliveInterval 30 is important because my ISP often drop idle connections, often not even 1 minute idle. Can probably tweak it to listen to a localhost only port instead of exposing them to internet.
Re: SSH into private machines from anywhere using Cloudflare Tunnel
#107> Question: do you use a different tool which require no maintenance or cost to run? Answer: ZeroTier -- on Mac, Linux (home & cloud), Windows, Android I actually setup DNS entries resolving to private IPs as configured in ZeroTier so I didn't have to login to dig them up but my default DNS provider won't resolve them. I guess newer ZeroTier versions optionally have DNS covered these days but I haven't looked into it…
Ive since set up wireguard and use nginx for reverse proxy and haven't looked back. This has been rock solid, set and forget.
Re: SSH into private machines from anywhere using Cloudflare Tunnel
#108Re: SSH into private machines from anywhere using Cloudflare Tunnel
#109Wow, that commenting system is so nice. I was looking for something like that! Amazing :) Edit: it sees https://utteranc.es/ is used.
Re: SSH into private machines from anywhere using Cloudflare Tunnel
#110> By the end of this post, you'll be able to run: ssh $machine_name from anywhere ... a service by Cloudflare ... will filter traffic to your machines through Cloudflare's network, including authenticating you ... your machines won't directly be exposed to threat actors and "1337 haxors". Won't they be exposed to CloudFlare? CloudFlare CEO has personally said: https://www.bizjournals.com/sanjose/news/2013/09/12/cloud…