A collection of 7 posts
Cloudflare Tunnel also allows users to deploy additional instances of our connector, cloudflared, for availability and failover scenarios. We refer to these unique instances as replicas. Each replica establishes four new connections which serve as additional points of ingress to your origin, should you need them. Each of the replicas
Read moreIn this last lab, we are going address the challenge of managing SSH access in large organizations. We will deploy short-lived certificates, one of the first and most popular services offered by Cloudflare’s Zero Trust platform. In this setup, a user attempting to access a specific resource via SSH
Read moreIn this section, we'll tackle a common advanced use case of private networks. We'll configure two virtual networks with overlapping subnets. Our Origin A will assume the role of our production system and Origin B of our staging. Note that both are in the same IP
Read moreIf you already went through our Zero Trust Architecture & Implementation lab, you created a remotely-managed Cloudflare Tunnel set up from the Cloudflare dashboard. However, Cloudflare Tunnel can also be managed locally using the cloudflared command line tool. Task Set up cloudflared tunnel using the command line. Make website running
Read more
* Getting started Part I - IdP 1. Set up IdP 2. Advanced IdP Part II - Tunnels 1. Locally-managed tunnel 2. Tunnel replicas Part III - Private networks 1. Virtual networks Part IV - Short-lived certs 1. Short-lived SSH certs
Read moreTask Cryptographically sign all SAML requests from Cloudflare to the IdP. Why * Authenticity: Signature ensures the Service Provider's (SP) request is genuine, preventing impersonation attacks * Mutual Trust: Establishes bidirectional trust between the SP and Identity Provider (IdP), enhancing overall security * Data Integrity: Protects the SAML request from tampering
Read moreWelcome to the Zero Trust Optimization & Troubleshooting Lab! You’ll need the following resources, all of which are provided for you: 1. A Cloudflare account & DNS zone 2. A Windows 11 client workstation 3. Two Ubuntu origin servers All lab resources (including this guide) are accessible on Cloudflare
Read more