CD
Cloudflare Developers•6d ago
I|🌸🌷SpiderUnderYourBed🌷🌸|I

Cloudflare tunnels is crashing in a loop

2025-04-03T08:41:04Z INF Starting tunnel tunnelID=72c14e86-612a-46a7-a80f-14cfac1f0764
2025-04-03T08:41:04Z INF Version 2025.4.0 (Checksum 7bec9d5632a9983230f7a30f287ce002d7944ba6b2eb9cf4252664e19d9b1c94)
2025-04-03T08:41:04Z INF GOOS: linux, GOVersion: go1.22.5-devel-cf, GoArch: amd64
2025-04-03T08:41:04Z INF Settings: map[no-autoupdate:true]
2025-04-03T08:41:04Z INF Environmental variables map[TUNNEL_TOKEN:*****]
2025-04-03T08:41:04Z INF Generated Connector ID: 55a8acb6-a834-4780-9bd8-59ab5fe86a00
2025-04-03T08:41:14Z ERR Failed to fetch features, default to disable error="lookup cfd-features.argotunnel.com on 10.43.0.10:53: dial udp 10.43.0.10:53: i/o timeout"
2025-04-03T08:41:54Z WRN Unable to lookup protocol percentage.
2025-04-03T08:41:54Z INF Initial protocol quic
2025-04-03T08:41:54Z INF ICMP proxy will use 172.16.91.156 as source for IPv4
2025-04-03T08:41:54Z INF ICMP proxy will use fe80::857:39ff:fe60:4b8b in zone eth0 as source for IPv6
2025-04-03T08:42:45Z INF ICMP proxy will use 172.16.91.156 as source for IPv4
2025-04-03T08:42:45Z INF ICMP proxy will use fe80::857:39ff:fe60:4b8b in zone eth0 as source for IPv6
2025-04-03T08:42:45Z INF Starting metrics server on [::]:20241/metrics
2025-04-03T08:43:35Z INF Tunnel server stopped
2025-04-03T08:43:35Z ERR Initiating shutdown error="Couldn't resolve SRV record &{region1.v2.argotunnel.com. 7844 1 1}: lookup region1.v2.argotunnel.com. on 10.43.0.10:53: read udp 172.16.91.156:54443->10.43.0.10:53: i/o timeout"
2025-04-03T08:43:35Z INF Metrics server stopped
Couldn't resolve SRV record &{region1.v2.argotunnel.com. 7844 1 1}: lookup region1.v2.argotunnel.com. on 10.43.0.10:53: read udp 172.16.91.156:54443->10.43.0.10:53: i/o timeout
2025-04-03T08:41:04Z INF Starting tunnel tunnelID=72c14e86-612a-46a7-a80f-14cfac1f0764
2025-04-03T08:41:04Z INF Version 2025.4.0 (Checksum 7bec9d5632a9983230f7a30f287ce002d7944ba6b2eb9cf4252664e19d9b1c94)
2025-04-03T08:41:04Z INF GOOS: linux, GOVersion: go1.22.5-devel-cf, GoArch: amd64
2025-04-03T08:41:04Z INF Settings: map[no-autoupdate:true]
2025-04-03T08:41:04Z INF Environmental variables map[TUNNEL_TOKEN:*****]
2025-04-03T08:41:04Z INF Generated Connector ID: 55a8acb6-a834-4780-9bd8-59ab5fe86a00
2025-04-03T08:41:14Z ERR Failed to fetch features, default to disable error="lookup cfd-features.argotunnel.com on 10.43.0.10:53: dial udp 10.43.0.10:53: i/o timeout"
2025-04-03T08:41:54Z WRN Unable to lookup protocol percentage.
2025-04-03T08:41:54Z INF Initial protocol quic
2025-04-03T08:41:54Z INF ICMP proxy will use 172.16.91.156 as source for IPv4
2025-04-03T08:41:54Z INF ICMP proxy will use fe80::857:39ff:fe60:4b8b in zone eth0 as source for IPv6
2025-04-03T08:42:45Z INF ICMP proxy will use 172.16.91.156 as source for IPv4
2025-04-03T08:42:45Z INF ICMP proxy will use fe80::857:39ff:fe60:4b8b in zone eth0 as source for IPv6
2025-04-03T08:42:45Z INF Starting metrics server on [::]:20241/metrics
2025-04-03T08:43:35Z INF Tunnel server stopped
2025-04-03T08:43:35Z ERR Initiating shutdown error="Couldn't resolve SRV record &{region1.v2.argotunnel.com. 7844 1 1}: lookup region1.v2.argotunnel.com. on 10.43.0.10:53: read udp 172.16.91.156:54443->10.43.0.10:53: i/o timeout"
2025-04-03T08:43:35Z INF Metrics server stopped
Couldn't resolve SRV record &{region1.v2.argotunnel.com. 7844 1 1}: lookup region1.v2.argotunnel.com. on 10.43.0.10:53: read udp 172.16.91.156:54443->10.43.0.10:53: i/o timeout
^ logs My tunnel k8s config: https://pastebin.com/aepHtqJV
Pastebin
apiVersion: apps/v1kind: Deploymentmetadata: name: tunnel labels:...
Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time.
1 Reply
I|🌸🌷SpiderUnderYourBed🌷🌸|I
I|🌸🌷SpiderUnderYourBed🌷🌸|IOP•2d ago
How do i troubleshoot either? 
apiVersion: apps/v1
kind: Deployment
metadata:
  name: tunnel
  labels:
    app: tunnel
spec:
  replicas: 1
  selector:
    matchLabels:
      app: tunnel
  template:
    metadata:
      labels:
        app: tunnel
    spec:
      dnsPolicy: None
      dnsConfig:
        nameservers:
          - 1.1.1.1
          - 10.43.0.10
#        searches:
#          - default.svc.cluster.local
      hostNetwork: true
      containers:
        - name: tunnel
          image: cloudflare/cloudflared:latest
          args:
            - tunnel
            - --no-autoupdate
            - run
          env:
            - name: TUNNEL_TOKEN
              valueFrom:
                configMapKeyRef:
                  name: env
                  key: CLOUDFLARE_TUNNEL_TOKEN
      restartPolicy: Always
apiVersion: apps/v1
kind: Deployment
metadata:
  name: tunnel
  labels:
    app: tunnel
spec:
  replicas: 1
  selector:
    matchLabels:
      app: tunnel
  template:
    metadata:
      labels:
        app: tunnel
    spec:
      dnsPolicy: None
      dnsConfig:
        nameservers:
          - 1.1.1.1
          - 10.43.0.10
#        searches:
#          - default.svc.cluster.local
      hostNetwork: true
      containers:
        - name: tunnel
          image: cloudflare/cloudflared:latest
          args:
            - tunnel
            - --no-autoupdate
            - run
          env:
            - name: TUNNEL_TOKEN
              valueFrom:
                configMapKeyRef:
                  name: env
                  key: CLOUDFLARE_TUNNEL_TOKEN
      restartPolicy: Always
Do you know why cloudflare is not consulting kubedns for the services ip? despite it being a nameserver on the list 
2025-04-07T10:05:51Z INF Registered tunnel connection connIndex=3 connection=9f1dea55-76ef-4a8c-9b1c-fe855d0aca21 event=0 ip=198.41.200.233 location=akl01 protocol=quic
2025-04-07T10:06:38Z ERR  error="Unable to reach the origin service. The service may be down or it may not be responding to traffic from cloudflared: dial tcp: lookup traefik on 1.1.1.1:53: no such host" connIndex=3 event=1 ingressRule=3 originService=http://traefik
2025-04-07T10:05:51Z INF Registered tunnel connection connIndex=3 connection=9f1dea55-76ef-4a8c-9b1c-fe855d0aca21 event=0 ip=198.41.200.233 location=akl01 protocol=quic
2025-04-07T10:06:38Z ERR  error="Unable to reach the origin service. The service may be down or it may not be responding to traffic from cloudflared: dial tcp: lookup traefik on 1.1.1.1:53: no such host" connIndex=3 event=1 ingressRule=3 originService=http://traefik
its asking the wrong server also it is the correct ip: 
kube-dns   ClusterIP   10.43.0.10   <none>        53/UDP,53/TCP,9153/TCP   12d
kube-dns   ClusterIP   10.43.0.10   <none>        53/UDP,53/TCP,9153/TCP   12d
How do i do that? I tried: 
apiVersion: v1
kind: ConfigMap
metadata:
  name: kube-dns
  namespace: kube-system
data:
  stubDomains: |
    {
      "argotunnel.com": ["1.1.1.1"]
    }
apiVersion: v1
kind: ConfigMap
metadata:
  name: kube-dns
  namespace: kube-system
data:
  stubDomains: |
    {
      "argotunnel.com": ["1.1.1.1"]
    }
didnt work oh wait my host network is true ill turn that off This didnt work.. 
apiVersion: v1
kind: ConfigMap
metadata:
  name: kube-dns
  namespace: kube-system
data:
  stubDomains: |
    {
      "argotunnel.com": ["1.1.1.1"]
    }
---
apiVersion: v1
kind: ConfigMap
metadata:
  name: kube-dns
  namespace: kube-system
data:
  stubDomains: |
    {
      "argotunnel.com": ["1.1.1.1"]
    }
---
ill try a coredns configmao Can you send me the config 
spiderunderurbed@raspberrypi:~/k8s $ kubectl logs tunnel-7794bdcf55-5jkb2
2025-04-07T19:12:44Z INF Starting tunnel tunnelID=72c14e86-612a-46a7-a80f-14cfac1f0764
2025-04-07T19:12:44Z INF Version 2025.4.0 (Checksum 7bec9d5632a9983230f7a30f287ce002d7944ba6b2eb9cf4252664e19d9b1c94)
2025-04-07T19:12:44Z INF GOOS: linux, GOVersion: go1.22.5-devel-cf, GoArch: amd64
2025-04-07T19:12:44Z INF Settings: map[no-autoupdate:true]
2025-04-07T19:12:44Z INF Environmental variables map[TUNNEL_TOKEN:*****]
2025-04-07T19:12:44Z INF Generated Connector ID: 2f8c928e-747a-4311-bf1e-6bcba1e8af5a
2025-04-07T19:12:54Z ERR Failed to fetch features, default to disable error="lookup cfd-features.argotunnel.com on 10.43.0.10:53: dial udp 10.43.0.10:53: i/o timeout"
2025-04-07T19:13:34Z WRN Unable to lookup protocol percentage.
2025-04-07T19:13:34Z INF Initial protocol quic
2025-04-07T19:13:34Z INF ICMP proxy will use 172.16.91.181 as source for IPv4
2025-04-07T19:13:34Z INF ICMP proxy will use fe80::3014:9aff:fe7f:225f in zone eth0 as source for IPv6
spiderunderurbed@raspberrypi:~/k8s $ cat coredns.yaml
apiVersion: v1
kind: ConfigMap
metadata:
  name: coredns
  namespace: kube-system
data:
  Corefile: |
    argotunnel.com:53 {
        errors
        log
        forward . 1.1.1.1
    }
    .:53 {
        errors
        health {
            lameduck 5s
        }
        ready
        kubernetes cluster.local in-addr.arpa ip6.arpa {
            pods insecure
            fallthrough in-addr.arpa ip6.arpa
            ttl 30
        }
        prometheus :9153
        forward . /etc/resolv.conf
        cache 30
        loop
        reload
        loadbalance
    }    
spiderunderurbed@raspberrypi:~/k8s $ kubectl logs tunnel-7794bdcf55-5jkb2
2025-04-07T19:12:44Z INF Starting tunnel tunnelID=72c14e86-612a-46a7-a80f-14cfac1f0764
2025-04-07T19:12:44Z INF Version 2025.4.0 (Checksum 7bec9d5632a9983230f7a30f287ce002d7944ba6b2eb9cf4252664e19d9b1c94)
2025-04-07T19:12:44Z INF GOOS: linux, GOVersion: go1.22.5-devel-cf, GoArch: amd64
2025-04-07T19:12:44Z INF Settings: map[no-autoupdate:true]
2025-04-07T19:12:44Z INF Environmental variables map[TUNNEL_TOKEN:*****]
2025-04-07T19:12:44Z INF Generated Connector ID: 2f8c928e-747a-4311-bf1e-6bcba1e8af5a
2025-04-07T19:12:54Z ERR Failed to fetch features, default to disable error="lookup cfd-features.argotunnel.com on 10.43.0.10:53: dial udp 10.43.0.10:53: i/o timeout"
2025-04-07T19:13:34Z WRN Unable to lookup protocol percentage.
2025-04-07T19:13:34Z INF Initial protocol quic
2025-04-07T19:13:34Z INF ICMP proxy will use 172.16.91.181 as source for IPv4
2025-04-07T19:13:34Z INF ICMP proxy will use fe80::3014:9aff:fe7f:225f in zone eth0 as source for IPv6
spiderunderurbed@raspberrypi:~/k8s $ cat coredns.yaml
apiVersion: v1
kind: ConfigMap
metadata:
  name: coredns
  namespace: kube-system
data:
  Corefile: |
    argotunnel.com:53 {
        errors
        log
        forward . 1.1.1.1
    }
    .:53 {
        errors
        health {
            lameduck 5s
        }
        ready
        kubernetes cluster.local in-addr.arpa ip6.arpa {
            pods insecure
            fallthrough in-addr.arpa ip6.arpa
            ttl 30
        }
        prometheus :9153
        forward . /etc/resolv.conf
        cache 30
        loop
        reload
        loadbalance
    }
this does not work tunnel, despite removing the dns configuration and trying this configmap still asks the wrong place Oh..

Did you find this page helpful?