https://discord.cloudflare.com logo
Join Discord
Powered by
# general-discussions
  • l

    Leo

    05/27/2023, 7:59 PM
    That depends on your code, you have full freedom
  • d

    DvidPi

    05/27/2023, 8:46 PM
    Is it possible to use a public host name in zero trust to route a UDP host?
  • d

    DvidPi

    05/27/2023, 8:46 PM
    I have a service on 19132 over UDP and I would like to route it to my domain
  • e

    Erisa | Support Engineer

    05/27/2023, 8:47 PM
    ?tunnel-tcp
  • h

    Helpflare

    05/27/2023, 8:47 PM
    Cloudflare Tunnels use Cloudflare's proxy, which only supports proxying HTTP Traffic. If you want to use non-http applications over your tunnel, Cloudflare has a few other options: For a few specific protocols such as SSH, RDP, and SMB, Cloudflare has guides on how to set them up with Tunnels and Cloudflare Access: For Arbitrary TCP like Minecraft, MySQL, and any other application, Cloudflare has a guide on how to get it working with `cloudflared`: Please note for all of these except SSH and VNC which can be browser-rendered, you will either need to use
    cloudflared
    (Cloudflare's tunnel daemon) on the client machine running in the background or Private Networking with WARP, and have WARP installed on the client machine logged into your Zero Trust Team.
  • e

    Erisa | Support Engineer

    05/27/2023, 8:47 PM
    this but for udp instead (its the same)
  • d

    DvidPi

    05/27/2023, 8:47 PM
    Thanks!
  • d

    DvidPi

    05/27/2023, 8:48 PM
    Wait, so just swap tcp:// with udp:// ?
  • e

    Erisa | Support Engineer

    05/27/2023, 8:49 PM
    Err
  • e

    Erisa | Support Engineer

    05/27/2023, 8:49 PM
    Hang on actually
  • e

    Erisa | Support Engineer

    05/27/2023, 8:50 PM
    Ah okay sorry I was wrong, only Private Networking (clients have to connect using the WARP client) supports UDP
  • e

    Erisa | Support Engineer

    05/27/2023, 8:50 PM
    Getting ahead of myself, thought that plain ZT would support it by now
  • d

    DvidPi

    05/27/2023, 8:50 PM
    So everyone that would want to join would have to use WARP?
  • e

    Erisa | Support Engineer

    05/27/2023, 8:50 PM
    Yeah and the setup is not easy - https://developers.cloudflare.com/cloudflare-one/connections/connect-apps/private-net/connect-private-networks/#connect-private-networks
  • d

    dave

    05/27/2023, 8:51 PM
    oh wow, is WAF rate limiting per CF Worker not even in the enterprise plan by default lol?
  • d

    DvidPi

    05/27/2023, 8:51 PM
    Alright then.. I'll run java through zero trust and bedrock with an SRV record then... Don't want to put players through this hassle.
  • e

    Erisa | Support Engineer

    05/27/2023, 8:54 PM
    Hmm do you mean like RL based on
    cf-worker
    header?
  • d

    dave

    05/27/2023, 8:54 PM
    yeah
  • e

    Erisa | Support Engineer

    05/27/2023, 8:54 PM
    You'd need Advanced Rate Limiting
  • d

    dave

    05/27/2023, 8:55 PM
    oh dang lol
  • e

    Erisa | Support Engineer

    05/27/2023, 8:55 PM
    which can vary counting based on headers
  • c

    Chaika

    05/27/2023, 8:55 PM
    should I update that tag to include something about arbitrary udp? Might be a good idea
  • d

    dave

    05/27/2023, 8:55 PM
    thanks!
  • e

    Erisa | Support Engineer

    05/27/2023, 8:55 PM
    yes please
  • e

    Erisa | Support Engineer

    05/27/2023, 8:55 PM
    or make a tag ?tunnel-udp
  • c

    Chaika

    05/27/2023, 8:55 PM
    there's a table here with all of the various features and plan levels: https://developers.cloudflare.com/waf/rate-limiting-rules/
  • e

    Erisa | Support Engineer

    05/27/2023, 8:56 PM
    anchor link
  • d

    dave

    05/27/2023, 8:56 PM
    Are my own Workers impacted by our own WAF?
  • e

    Erisa | Support Engineer

    05/27/2023, 8:57 PM
    most likely, unless you add logic to exclude them
  • d

    dave

    05/27/2023, 8:57 PM
    Copy code
    cf.worker.upstream_zone in {"aimoda.workers.dev" "ai.moda"}
1...426242634264...4267Latest