Ip (Cloudflare) to be released to establish argo tunnel in firewall

Zero Trust Cloudflare Tunnel
1

We have created argo tunnel to on prem WWW server .
We have blocked incoming traffic in firewall.
We have internet access from Server to outside .
We need to restrict full internet acccess to server and allow only IP/ IP Range / FQDN need to establish Argo Tunnel.

Thanks in Advance

2

Here you go:

1 Like
3

The ideal solution for your tunnel:

  • Configure Apache/Web Server to ip 127.0.0.1 then the appropriate port 80 443 8000 8080 of your choice
  • Configure Cloudflare Tunnel
    Cloudflared tunnel --hostname [hostname] http://localhost:8000

Because the request is initiated from the client, Tunnel is able to expose applications to the internet that are behind a NAT or a firewall without any further port forwarding or configuration.

2 Likes