Cloudflare Tunnel securely connects private infrastructure to Cloudflare without public IP addresses.
Cloudflare Tunnel uses the cloudflared connector to establish outbound-only, post-quantum encrypted connections between private origins and Cloudflare's network. It lets teams publish applications or route private services without exposing origin IP addresses or opening inbound firewall ports.
The product supports secure origin connectivity, public hostname routing, private access for Workers VPC, and origin endpoints for load balancing. It applies Cloudflare's CDN, web application firewall, bot management, and DDoS protections to traffic that reaches connected origins.
| Attribute | Cloudflare Tunnel | Gateway, Share Localhost | |
|---|---|---|---|
| Provider |  |  | |
| Founded | 2009 | 2015 | |
| Sells To | Enterprise, Small Business | Small Business | |
| Pricing Model | Recurring, SaaS, Usage-based | Recurring | |
| Ownership | Private equity-backed, Public, Venture-backed | Venture-backed |
Provider
Founded 2009
Sells To Enterprise, Small Business
Pricing Model Recurring, SaaS, Usage-based
Ownership Private equity-backed, Public, Venture-backed
Provider
Founded 2015
Sells To Small Business
Pricing Model Recurring
Ownership Venture-backed
CI/CD Connectivity provides secure connectivity for CI/CD runners.
Private endpoint service for connecting specific remote services without joining entire networks.
Service-level connectivity between cloud applications and private customer APIs or databases.
Zero Trust identity-based connectivity platform that replaces legacy VPN, SASE, and PAM.
Zero Trust remote access platform replacing VPNs with identity-based access to private resources.
Infrastructure Access provides identity-based access to infrastructure.
Software-defined network overlay connecting devices, clouds, and networks worldwide.
Funnel provides public HTTPS access to a local tailnet service.
CI/CD Connectivity provides secure connectivity for CI/CD runners.
Cloud Connectivity provides hybrid and multicloud mesh networking.
Private endpoint service for connecting specific remote services without joining entire networks.
Workload Connectivity provides private connectivity across workloads.
Service-level connectivity between cloud applications and private customer APIs or databases.
Zero Trust identity-based connectivity platform that replaces legacy VPN, SASE, and PAM.
Zero Trust remote access platform replacing VPNs with identity-based access to private resources.
Site-to-Site Networking links sites through a WireGuard mesh.
Secure SaaS provides Zero Trust control for SaaS traffic.
Infrastructure Access provides identity-based access to infrastructure.
Software-defined network overlay connecting devices, clouds, and networks worldwide.
Edge & IoT provides Zero Trust connectivity for edge devices.
