Use cloudflared to bypass firewall

[wwng2333]

Hi there, i found that we can use Cloudflare argo tunnel to easily bypass firewall, what we require is only setup a simple cloudflared on your hub and target machine. Here is the doc. It works fine, i already tested on beszel. I will show you how to do this step by step.
First, install cloudflared both on your target and the hub machine.

Then add a ssh target like this, input your beszel client port, no special configure is required, everything is simple and easy.

Then start a cloudflared on you hub machine like this. You can also setup config for daemon running.

root@crazy:~# cloudflared access ssh --hostname YOUR_HOSTNAME --url 127.0.0.1:22222
2024-11-03T13:47:34Z INF Start Websocket listener host=127.0.0.1:22222

Then we can add new system at beszel, very simple and easy.

The only issue is the ip was shown as 127.0.0.1 :)

[henrygd]

Awesome, thanks for sharing!

We're in the process of converting the docs over to a standalone site. I'll make sure to mention this in that section.

[la3rence]

cloudflared may be not available in some specific Linux distributions. It would be helpful if beszel supports SSH Tunnel under the hood.

[wwng2333]

cloudflared may be not available in some specific Linux distributions. It would be helpful if beszel supports SSH Tunnel under the hood.

It can running in docker. Here is the compose:

services:
  beszel:
    image: "henrygd/beszel-agent"
    container_name: "beszel-agent"
    restart: unless-stopped
    network_mode: host
    ports:
      - '45876:45876'
    environment:
      PORT: 45876
      KEY: "YOUR_KEY"
  cloudflared:
    container_name: cloudflared-tunnel
    image: cloudflare/cloudflared
    restart: unless-stopped
    command: tunnel run
    environment:
      - TUNNEL_TOKEN=YOUR_TOKEN

[playaz44]

cloudflared may be not available in some specific Linux distributions. It would be helpful if beszel supports SSH Tunnel under the hood.

Hello, can you specify on which system cloudflared is not available? Releases page https://github.com/cloudflare/cloudflared/releases it seems like it can be run on any device. I ran it myself directly on the router.

[la3rence]

cloudflared may be not available in some specific Linux distributions. It would be helpful if beszel supports SSH Tunnel under the hood.

Hello, can you specify on which system cloudflared is not available? Releases page https://github.com/cloudflare/cloudflared/releases it seems like it can be run on any device. I ran it myself directly on the router.

FreeBSD.

[wwng2333]

cloudflared may be not available in some specific Linux distributions. It would be helpful if beszel supports SSH Tunnel under the hood.

Hello, can you specify on which system cloudflared is not available? Releases page https://github.com/cloudflare/cloudflared/releases it seems like it can be run on any device. I ran it myself directly on the router.

FreeBSD.

cloudflare/cloudflared#145

[ejscheepers]

Hi, I am trying to following this guide, but I am struggling:

• I have an existing server which I access using a Cloudflare Tunnel. It has a public hostname ssh.domain.com pointing to ssh://localhost:22
• I am running hub on another server, which does not use Cloudflare Tunnel, it already has an agent setup and working perfectly

How do I add the Server with a Cloudflare Tunnel as a system?

• Do i need to add another public hostname in CF Tunnel Dashboard, if so, do I need to add it has bezel.domain.com pointing to ssh://localhost:45876 or http://localhost:45876?
• And what do I then input in the Add System Dialog?

[wwng2333]

1. Install cloudflared on BOTH dashboard and agent machine.
2. setup a tunnel at agent, type is ssh, ssh://127.0.0.1:45876 (your beszel agent port)
3. running a tunnel at dashboard use cloudflared access ssh --hostname YOUR_HOSTNAME --url 127.0.0.1:22222, maybe setup a systemd word for that to keep it running background.
4. add new client at dashboard, address is 127.0.0.1:22222.
   So, this way is not a offical usage by cloudflare, but it works. I recommand guys to use tailscale instead if possible.

[ejscheepers]

WOW. I used Tailscale for first time ever now, and it was super easy. If anyone else finds this:

1. Add both Hub Server and Agent Server on Tailscale
2. Add System in Beszel and use IP of Agent Server on Tailscale and default settings
3. Bob's your uncle!

[wwng2333]

y, tailscale is amazing.