Skip to content
Cloudflare for Teams
Visit Cloudflare for Teams on GitHub
Set theme to dark (⇧+D)

Private networks

You can connect private networks and the services running in those networks to Cloudflare using Cloudflare Tunnel. End users can then connect to those resources using the WARP client by first authenticating into your organization's account. When users connect to an IP made available through Cloudflare Tunnel, WARP sends their connection through Cloudflare's network to the corresponding tunnel.

Cloudflare Tunnel relies on a piece of software, cloudflared, to create those connections. Administrators define the IPs available in that environment and associate them with the Tunnel. Users in your organization can then reach the service by enrolling into your organization's Cloudflare for Teams account and using the WARP agent.

Once enrolled, user endpoints will be able to connect to private RFC 1918 IP space and other ranges that you control. Applications running on those endpoints will be able to reach those private IPs as well in a private network model. Cloudflare Tunnel relies on a piece of software, cloudflared, to create those connections.

To connect a private network to Cloudflare's edge, check out our tutorial.