News for hackers. Stuff that matters.

A comment on Securing Infrastructure at Scale with Cloudflare Access.

Re:Securing Infrastructure at Scale with Cloudflare Access by cj on Sunday July 21, 2019 @03:33PM (#20493195)
> Argo Tunnel lets you expose a server to the Internet without opening any inbound ports. The service runs a lightweight daemon on your server that initiates outbound tunnels to the Cloudflare network. Instead of managing DNS, network, and firewall complexity, Argo Tunnel helps administrators serve traffic from their origin through Cloudflare with a single command.

Is anyone here using this Cloudflare feature in production?

What has your experience been?

[ Parent | on HN ]
Re:Securing Infrastructure at Scale with Cloudflare Access by lasdfas on Sunday July 21, 2019 @04:05PM (#20493341)
We have been using it at my company (100 employees) for 2 internal services for about 6 months with Google SSO. It has been working great. There has been 1 outage where it was down for a couple hours.

My only complaint is the security of it is not perfect. When you launch the tunnel, you declare the domain you want it to use. I can be any domain on the account and can't limit it to specific domains. It's a little dangerous if you have sensitive domains on your Cloudflare account that you don't want to use Argo.

[ Parent | on HN ]