Zero Trust - Tunnel - Warp client - Proxmox

Zero Trust Cloudflare Tunnel
1

What is the name of the domain?

abc123.com

What is the issue you’re encountering

I setup Zero Trust with a tunnel to my proxmox server reachable by a public hostname, I am able to reach the host when I connect to the warp client which seems right by my rules however within Proxmox my firewall rules only allow 2 ip addresses to access the gui. How is any device from any location using warp able to bypass those firewall rules? This is not an issue, as it is behaving how I want it to. I just want to understand why. Thank you

2

Please find a detailed explanation of how a Cloudflare Tunnel works below.

The tl;dr is that users don’t connect directly to your Proxmox server: they only connect to Cloudflare’s network, while cloudflared makes an outbound-only connection from your Proxmox server to Cloudflare.

3

I ran " netstat -tnp | grep :8006 " in my Proxmox shell and saw the cloudflared tunnel which stated my own servers IP address : random port → Server IP : port 8006

So the reason the firewall was bypassed is because the tunnel made the traffic look like it originated at the source. Does this sound right?

4

That’s about right… except it’s not trickery: it is an oubound connection.

1 Like
5

Thank you, networking is my weak point. I appreciate your explanation and the link.

1 Like
6

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.