Cloudflared-windows-amd64.exe Now
– Cloudflared does not listen on ports locally (it connects outbound). The error may be your local web server.
Start small: run a one-off tunnel to a test website. Then graduate to a named tunnel with a custom domain and persistent Windows service. You’ll never mess with port forwarding again. Cloudflared is maintained by Cloudflare, Inc. This guide is unofficial but follows best practices as of 2025.
If you run a web server on your Windows machine—whether for development, home automation, or a personal website—you know that exposing it to the internet can be risky. Port forwarding is messy, dynamic DNS is a hassle, and your ISP might block incoming traffic altogether.
cloudflared.exe tunnel create my-first-tunnel This creates a tunnel (with a UUID) and stores its credentials in .cloudflared . It also creates a tunnel configuration file template. cloudflared-windows-amd64.exe
Open or PowerShell and navigate to where cloudflared.exe lives, then run:
– Ensure outbound TCP port 443 (HTTPS) and UDP 443 are allowed for cloudflared.exe . 10. Updating Cloudflared Cloudflared updates frequently. To update manually:
cloudflared.exe tunnel route dns my-first-tunnel myapp.yourdomain.com This creates a DNS record at Cloudflare pointing to the tunnel. Create a configuration file config.yml in %USERPROFILE%\.cloudflared\ : – Cloudflared does not listen on ports locally
For TCP services, you must also set up Cloudflare Access (or use cloudflared access tcp on the client side). For temporary sharing (e.g., a demo), you don’t even need a domain. Run:
Now, route traffic to a local service. For example, if you run a web app on localhost:3000 :
– Add cloudflared.exe as an exception in Windows Defender or your third-party AV. Then graduate to a named tunnel with a
First, ensure your config is ready. Then:
This article covers everything from download to advanced configuration. Cloudflared is the client that powers Cloudflare Tunnel (formerly Argo Tunnel). It establishes an encrypted connection between your origin server (your Windows PC) and Cloudflare’s edge. Traffic from the public internet hits Cloudflare, then travels through the tunnel to your local service.