Cloudflare Tunnel’s connectivity behavior

[muneeb.ahmad]

What is the name of the domain?

example.com

What is the issue you’re encountering

I’m facing an issue with my Cloudflare Tunnel’s connectivity behavior related to inbound and outbound traffic rules. When outbound traffic to Cloudflare IPs is blocked but all inbound traffic is allowed, the tunnel establishes successfully but keep showing the warning that “failed to dial to edge”. However, when inbound and outbound both are blocked, the tunnel fails. Thats expected behaviour. According to Cloudflare’s documentation, cloudflared creates outbound-only connections to Cloudflare’s global network. Given this, I’m confused about why inbound traffic rules are affecting the tunnel’s behavior. Could someone help clarify why this is happening? Is there an additional inbound requirement that’s not explicitly mentioned in the documentation? Thanks in advance!

[fritex]

@muneeb.ahmad

failed to dial to edge

Maybe your ISP doesn’t support QUIC at some point or restricted connections on ports?

Could you select other protocol e.g. http2, using the command and retry again as follows on the instructions from below article?

Tunnel run parameters · Cloudflare Zero Trust docs

@muneeb.ahmad

connectivity behavior related to inbound and outbound traffic rules

ERR Serve tunnel error error="DialContext error: dial tcp i/o timeout

How are you setting up this tunnel? Could you please let us know the steps you have taken and what documentation you have followed this far? Have this tunnel previously worked before? Or is this a first time implementation of it? Given the log messages you have shared with us, it appears that there is a connection refused occurring. Could you please confirm that the endpoints below are not getting blocked on your network where you are trying to run the tunnel?