Creates a Load Balancer with an origin pool that points to the tunnel.
cloudflared tunnel route ip add <IP/CIDR> <NAME or UUID>
Adds any network route space (represented as a CIDR) to your routing table. That network space becomes reachable for requests egressing from a user’s machine as long as it is using Cloudflare WARP and is enrolled in the same account that is running the tunnel chosen here. Further, those requests will be proxied to the specified tunnel, and reach an IP in the given CIDR, as long as that IP is reachable from the tunnel. To assign the IP route to a specific Virtual Network, use the --vnet option.
cloudflared tunnel route ip show (or list)
Shows your organization’s private routing table. You can use additional flags to filter the results.
cloudflared tunnel route ip delete
Deletes the row for a given CIDR from your routing table. That portion of your network will no longer be reachable by the WARP client.
cloudflared tunnel route ip get <IP/CIDR>
Checks which row of the routing table will be used to proxy a given IP. This helps check and validate your configuration.
cloudflared tunnel route dns
Creates a DNS CNAME record hostname that points to the tunnel.
cloudflared tunnel --config path/config.yaml run <NAME or UUID>
Runs a tunnel, creating highly available connections between your server and the Cloudflare edge. You can provide name or UUID of the tunnel to run either as the last command line argument or in the configuration file using tunnel: <NAME>.
cloudflared tunnel info <NAME or UUID>
Displays details about the active connectors for a given tunnel identified by name of UUID.
cloudflared tunnel cleanup <NAME or UUID>
Deletes connections for tunnels with the given UUIDs or names. This is useful if you get an error trying to delete or run a tunnel after cloudflared is not shut down gracefully (for example, if a kill command is issued).
cloudflared tunnel delete <NAME or UUID>
Deletes tunnels with the given name or UUID. A tunnel cannot be deleted if it has active connections. To delete the tunnel unconditionally, use the -f flag.
cloudflared tunnel vnet add <NAME or UUID>
Creates a Virtual Network to which IP routes can be assigned. To make this Virtual Network the default for your Zero Trust organization, use the -d flag.
cloudflared tunnel vnet delete <NAME or UUID>
Deletes the Virtual Network with the given name or UUID. Before you can delete a Virtual Network, you must first delete all IP routes assigned to the Virtual Network.
cloudflared tunnel vnet list
Displays all active Virtual Networks, the default Virtual Network, and their creation times.
cloudflared tail <UUID>
Start a session to livestream logs from a specific tunnel. For more information, refer to Tunnel logs.
Looks for a new version on the official download server. If a new version exists, it updates the agent binary and quits. Otherwise, no action is performed. This command only works if cloudflared was installed from GitHub binaries or from source. If you installed cloudflared with a package manager, you must update it using the same package manager. On Linux, you can check if cloudflared is owned by a package manager by running ls -la /usr/local/etc/cloudflared/ and looking for .installedFromPackageManager in the output.
cloudflared version
Prints the cloudflared version number and build date.