CF Access - Are individual tunnels needed for each server?

Working on moving hundreds of servers from key based authentication to Cloudflare Access.

The documentation appears silent on this question

If we have 100 servers, do we need to setup 100 individual tunnels - one for each server? Or can a single tunnel be reused to allow connecting to any one of the 100 servers?


I’m pretty sure each server will need its own tunnel. A tunnel has a Tunnel ID, and the DNS record for that hostname is a CNAME that points to the Tunnel ID so it can route traffic to the correct server.