Skip to content
Cloudflare for Teams
Visit Cloudflare for Teams on GitHub
Set theme to dark (⇧+D)

Private networks

You can connect private networks and the services running in those networks to Cloudflare using Argo Tunnel. End users can connect to those resources using the Cloudflare WARP agent by first authenticating into your organization's account.

Argo Tunnel runs a lightweight daemon named (cloudflared) in your infrastructure that establishes outbound connections (Tunnels) between your environment and the Cloudflare edge. Administrators define the IPs available in that environment and associate them with the Tunnel.

When users connect to an IP made available through Argo Tunnel, WARP sends their connection through Cloudflare's network to the corresponding Argo Tunnel.

In order to connect private networks, you'll first need to:

  1. Download and install cloudflared in your private network
  2. Authenticate cloudflared

Once cloudflared has been installed and authenticated, you will need 3 high-level steps to connect your network to users enrolled in your organization's Cloudflare for Teams account.

  1. Create a Tunnel
  2. Configure IPs in WARP
  3. Run your Tunnel
  4. Enroll clients to connect

Be sure to check out our Tutorials, where you can also find best practices for managing Tunnels as an administrator.