Cloudflared-windows-amd64.exe -

– Cloudflared does not listen on ports locally (it connects outbound). The error may be your local web server.

net start cloudflared Or use the Services GUI ( services.msc ). The service automatically runs at boot. | Local Service | Example URL | Config service line | |------------------------|--------------------------------------|--------------------------------------| | IIS (default website) | http://localhost:80 | service: http://localhost:80 | | Node.js dev server | http://localhost:3000 | service: http://localhost:3000 | | Jellyfin / Plex | http://localhost:8096 | service: http://localhost:8096 | | SMB / RDP (via Access) | tcp://localhost:3389 | service: tcp://localhost:3389 | | SSH | tcp://localhost:22 | service: tcp://localhost:22 |

Invoke-WebRequest -Uri "https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-windows-amd64.exe" -OutFile "$env:USERPROFILE\Downloads\cloudflared.exe" Move it to a permanent location, e.g., C:\cloudflared\cloudflared.exe , and add that folder to your PATH for easy access. Cloudflared needs to authenticate with your Cloudflare account.

– Add cloudflared.exe as an exception in Windows Defender or your third-party AV. cloudflared-windows-amd64.exe

Visit https://github.com/cloudflare/cloudflared/releases Look for the latest release and download: cloudflared-windows-amd64.exe amd64 means it’s for 64-bit Windows (most modern PCs). For 32-bit, use 386 . Alternative using command line (PowerShell as Admin):

– Check logs: cloudflared.exe tunnel run --config C:\path\to\config.yml my-first-tunnel (run manually first).

Open or PowerShell and navigate to where cloudflared.exe lives, then run: – Cloudflared does not listen on ports locally

cloudflared.exe tunnel route dns my-first-tunnel myapp.yourdomain.com This creates a DNS record at Cloudflare pointing to the tunnel. Create a configuration file config.yml in %USERPROFILE%\.cloudflared\ :

cloudflared.exe tunnel --url http://localhost:3000 Cloudflare gives you a random https://random-name.trycloudflare.com URL. This uses Cloudflare’s Quick Tunnels feature—no authentication, no config. “Access is denied” – Run Command Prompt or PowerShell as Administrator when installing the service or writing to Program Files .

This article covers everything from download to advanced configuration. Cloudflared is the client that powers Cloudflare Tunnel (formerly Argo Tunnel). It establishes an encrypted connection between your origin server (your Windows PC) and Cloudflare’s edge. Traffic from the public internet hits Cloudflare, then travels through the tunnel to your local service. The service automatically runs at boot

cloudflared.exe tunnel login A browser window will open. Log in to your Cloudflare account and select the domain you want to use. This generates a cert.pem file in %USERPROFILE%\.cloudflared\ . That certificate is your global API credential—keep it safe. Tunnels are persistent connections with their own configuration. Let’s create one.

For TCP services, you must also set up Cloudflare Access (or use cloudflared access tcp on the client side). For temporary sharing (e.g., a demo), you don’t even need a domain. Run:

– Ensure outbound TCP port 443 (HTTPS) and UDP 443 are allowed for cloudflared.exe . 10. Updating Cloudflared Cloudflared updates frequently. To update manually: