Cloudflare Tunnel 内网穿透( 二 )

更多支持的服务和配置方式,参考帮助文档:Supported protocols
配置完以后,我们测试下配置文件有没有问题
cloudflared tunnel ingress validate还可以再测试下规则是否命中
cloudflared tunnel ingress rule https://<域名1.com>测试运行如果没问题,OK,一切妥当,我们开始测试
cloudflared --loglevel debug --transport-loglevel warn --config ~/.cloudflared/config.yml tunnel run <隧道UUID>终端会输出一大堆log,但没有红色报错,那就没问题 。
我们登陆Cloudflare Zero Trust的Web控制台,左边选择Access-Tunnels,可以看到隧道已经跑起来了,状态是Active 。

Cloudflare Tunnel 内网穿透

文章插图
 
然后,我们在浏览器里面输入域名,正常情况下,你可以看到网站已经可以正常访问了 。
创建系统服务按下Ctrl+z,先停掉刚才启动的服务 。为了让服务能每次系统启动的时候都跟着启动,我们需要把Cloudflared注册成系统服务 。不然系统一重启,就歇菜了 。
cloudflared service installsystemctl start cloudflaredsystemctl status cloudflared跑完这三条命令,应该就可以看到服务有正常输出,并且Web控制台也可以看到状态是Active 。
● cloudflared.service - cloudflaredLoaded: loaded (/etc/systemd/system/cloudflared.service; enabled; vendor preset: disabled)Active: active (running) since Fri 2022-12-09 17:22:43 CST; 9s agoMain PID: 37812 (cloudflared)Tasks: 18 (limit: 407348)Memory: 23.5MCPU: 71msCGroup: /system.slice/cloudflared.service└─37812 /usr/local/bin/cloudflared --no-autoupdate --config /etc/cloudflared/config.yml tunnel runDec 09 17:22:42 Web-Server-1 cloudflared[37812]: 2022-12-09T09:22:42Z INF Generated Connector ID: 12345-123-123-123-12345Dec 09 17:22:42 Web-Server-1 cloudflared[37812]: 2022-12-09T09:22:42Z INF Initial protocol h2muxDec 09 17:22:42 Web-Server-1 cloudflared[37812]: 2022-12-09T09:22:42Z INF ICMP proxy will use 127.0.0.1 as source for IPv4Dec 09 17:22:42 Web-Server-1 cloudflared[37812]: 2022-12-09T09:22:42Z INF ICMP proxy will use ::: in zone eno1 as source for IPv6Dec 09 17:22:42 Web-Server-1 cloudflared[37812]: 2022-12-09T09:22:42Z INF Starting metrics server on 127.0.0.1:12345/metricsDec 09 17:22:43 Web-Server-1 cloudflared[37812]: 2022-12-09T09:22:43Z INF Connection 12345-123-123-123-12345 registered connIndex=0 ip=<nil> location=SJCDec 09 17:22:43 Web-Server-1 systemd[1]: Started cloudflared.Dec 09 17:22:44 Web-Server-1 cloudflared[37812]: 2022-12-09T09:22:44Z INF Connection 12345-123-123-123-12345 registered connIndex=1 ip=<nil> location=HKGDec 09 17:22:46 Web-Server-1 cloudflared[37812]: 2022-12-09T09:22:46Z INF Connection 12345-123-123-123-12345 registered connIndex=3 ip=<nil> location=HKGDec 09 17:22:46 Web-Server-1 cloudflared[37812]: 2022-12-09T09:22:46Z INF Connection 12345-123-123-123-12345 registered connIndex=2 ip=<nil> location=SJC注意:创建系统服务后,配置文件会被拷贝到
/etc/cloudflared/config.yml,后续修改配置必须修改新文件
总结如果有多台服务器,那么可以在不同的服务器安装多个Cloudflared,配置多个Tunnel 。
 
ref https://blog.upx8.com/3570




推荐阅读