Skip to content
Visit Access on GitHub
Set theme to dark (⇧+D)

Other Protocols

Cloudflare Access can secure connections to applications over arbitrary TCP protocols using Argo Tunnel. The feature includes support for commands to specify SMB connections to SMB file shares as well as a command for arbitrary TCP traffic.

Doing so requires both the protected server and the client use Argo Tunnel. Argo Tunnel exposes your origin server directly to Cloudflare, avoiding external internet connections. Using Argo Tunnel ensures that Cloudflare evaluates all requests to your application.

Establishing an arbitrary TCP or SMB connection to an Access-protected server requires installing Cloudflare's cloudflared command-line tool on the client machine so that it can connect over Argo Tunnel.

SMBGuide to securing SMB file shares.
Arbitrary TCPGuide to proxying arbitrary TCP.
kubectlGuide to protecting Kubernetes API servers.