Run setup once
Installs cloudflared if needed, authenticates Cloudflare, creates your tunnel, writes config, and can auto-start both services.
tunnel setup
tunnelA reverse proxy built for seconds
A local reverse proxy with Cloudflare Tunnel routing. No port forwarding. No firewall rules. Just run one command.
Features
- –Route any local service: to a public URL in seconds.
- –DNS providers: Cloudflare, GoDaddy, Namecheap, and Manual DNS setup.
- –Auto-register: ports and named subdomains with one command.
- –WebSocket-ready: proxying so HMR works out of the box.
- –Secure credentials: stored in macOS Keychain, never plaintext files.
terminal — tunnel
$ tunnel 5173
✓ Connected to Cloudflare Tunnel
→ https://5173.yourdomain.com
Keep this window open to maintain the tunnel.
$ tunnel list
PORT URL STATUS
5173 5173.yourdomain.com active
8080 8080.yourdomain.com active
Quick start
Expose your local app
Prints https://5173.yourdomain.com and keeps it discoverable in tunnel list.
tunnel 5173FAQ
How does tunnel work?
Traffic flows browser → Cloudflare edge → cloudflared tunnel → requests-proxy (:7999) → localhost:<port>.
Can I use named URLs instead of numeric ports?
Yes. Register aliases with tunnel --name <name> <port> and use URLs like https://api.yourdomain.com.
Which platforms are supported?
The install script supports macOS and Linux on amd64 and arm64.
What security guardrails are built in?
By default it blocks sensitive ports, rejects nested subdomains, limits body size, and only proxies to 127.0.0.1 targets.