It’s my understanding that when using SMB File Shares all traffic will be proxied through Cloudflare using Argo Tunnels, which makes sense.
Now, imagine I’m on the local network where the SMB shares exist, is the cloudflared daemon intelligent enough to NOT proxy all traffic through Cloudflare since the server with the SMB shares is on the same network as the client?
That’s sort of antithetical to the concept of ZTNA. It doesn’t know (and if it did, not sure the ‘correct’ behavior would be to treat it any differently as a result). I can see why someone might choose to do so (in which case you could kill the tunnel) but as a design pattern it’s problematic.
Killing the tunnel and starting it again when required is not the solution I was looking for, unfortunately.