Really weird: CloudFlare Tunnel working even when DOWN

SSE and Zero trust Cloudflare Tunnel
1

What is the name of the domain?

proxy.economizafloripa.com.br

What is the issue you’re encountering

Cloudflare tunnel is still working despite down

What steps have you taken to resolve the issue?

Hi,

On my Windows 11 computer I made sure the cloudflared service is stopped in services.msc. Right after that, when I check the tunnel status in the cloudflare dashboard (Cloudflare One) it sayd the tunnel is DOWN. Great, so the tunnel should be down, right?

Now I open cmd on my Windows computer and execute the command below:

curl --proxy “http://proxy.economizafloripa.com.br:80” “http://httpbin.io/ip” --verbose

Incredibly, it connected to the proxy that should be down. Here is the output:

* Host httpbin.io:80 was resolved.
* IPv6: (none)
* IPv4: 172.67.203.129, 104.21.85.72
*   Trying 172.67.203.129:80...
* Connected to proxy.economizafloripa.com.br (172.67.203.129) port 80
* using HTTP/1.x
> GET http://httpbin.io/ip HTTP/1.1
> Host: httpbin.io
> User-Agent: curl/8.13.0
> Accept: */*
> Proxy-Connection: Keep-Alive
>
* Request completely sent off
< HTTP/1.1 200 OK
< Date: Mon, 16 Jun 2025 17:35:23 GMT
< Content-Type: application/json; charset=utf-8
< Content-Length: 33
< Connection: keep-alive
< Access-Control-Allow-Credentials: true
< Access-Control-Allow-Origin: *
< cf-cache-status: DYNAMIC
< Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qmVtINB1Gb1C%2BV6qIiEWev3s7d%2FaeqtLZPa4xEPZ0NyX1ztLh2AF%2Bnnhid%2F0GF7oBCxSpTv5symmPcAI4UkoYPm8TiA%2F44sIHJk6TXpbuATyRkvDXNjv%2Fu7i%2BFRg"}],"group":"cf-nel","max_age":604800}
< NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
< Server: cloudflare
< CF-RAY: 950c1038fcd26d7c-GIG
< alt-svc: h3=":443"; ma=86400
< server-timing: cfL4;desc="?proto=TCP&rtt=28431&min_rtt=28431&rtt_var=14215&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=123&delivery_rate=0&cwnd=215&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
<
{
  "origin": "198.176.120.120"
}
* Connection #0 to host proxy.economizafloripa.com.br left intact

I would like the command above to just fail, why is cloudflare fullfilling the request as a proxy even when it says it’s DOWN?

2

The request simply never goes through your tunnel, no matter whether it’s up or down.

This command simply means that http://httpbin.io/ip is requested, but the request is sent to the IP of proxy.economizafloripa.com.br instead of its own IP.

But the IP for proxy.economizafloripa.com.br is a Cloudflare IP, and httpbin.io is on Cloudflare, so you’re just serving the request via Cloudflare.

This would have the exact same effect:

curl -sv http://httpbin.io/ip --connect-to ::community.cloudflare.com
4

Sometimes on my Windows Server machines it says DEGRADED or DOWN, but get’s up after an hour or less, despite it’s running and the machine has got uplink. Usually, after restart it does changes or when the uplink really has some issues such as interruptions, or there’s a router/switch upgrade, etc. then it does change, and sometimes get’s UP status during the day, despite everything works fine. (might be my notifications :thinking: ) Haven’t updated my tunnel for a while already.

5

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.