Does Tunnels protect from DDoS?
Does Cloudflare tunnels protect your server from DDoS?
https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/
9 Replies
It allows you to not have to open ports to receive traffic but there’s nothing extra they do. You do have the standard Cloudflare DDoS in front of it
Can I use it for a Minecraft server? (does all stuff though tunnels use the standard Cloudflare DDoS then?)
?tunnel-tcp
Cloudflare Tunnels use Cloudflare's proxy, which only supports proxying HTTP Traffic. If you want to use non-http applications over your tunnel, Cloudflare has a few other options:
For a few specific protocols such as SSH, RDP, and SMB, Cloudflare has guides for them here:
https://developers.cloudflare.com/cloudflare-one/applications/non-http/
For Arbitrary TCP like Minecraft, MySQL, and any other tcp application, Cloudflare has a guide here: https://developers.cloudflare.com/cloudflare-one/applications/non-http/arbitrary-tcp/
For Arbitrary UDP like Minecraft Bedrock, SMTP, and any other udp application, you will need to use Private Networking with WARP: https://developers.cloudflare.com/cloudflare-one/connections/connect-apps/private-net/connect-private-networks/
Please note for all of these except SSH and VNC which can be browser-rendered, you will either need to use cloudflared (Cloudflare's tunnel daemon) on the client machine running in the background or Private Networking with WARP, and have WARP installed on the client machine logged into your Zero Trust Team.
It does require everyone who you want to connect to it to also be running cloudflared
Hm, that could be a problem
Basicly, seems either pay for TCPSHIELD, pay for Spectrum or convice people to install a program to join
https://modrinth.com/mod/modflared may be the most easy way to do it with CF Tunnels
Modrinth
Modflared - Minecraft Mod
Automatically connects you to a Cloudflare tunnel without having to install cloudflared separately.
Or playit.gg though I don’t what DDoS protection it offers
I kinda think the Tunnels way is best, as I can share the mod as part of my mod pack
I like how good CF is at DDoS proction as I do not think TCPShield';s free plan would hold up to a meduim or lager DDoS