Credential-Zugriff
Reads tunnel credentials, Cloudflare tokens, and local tunnel config.
brew
cloudflared mit Homebrew, apk, chocolatey, MacPorts, Nix, pacman, zypper, scoop, winget installieren
Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für cloudflared in AI-Agent-Workflows.
Agent-Sicherheit
Antwort zur Agent-Sicherheit
cloudflared manages tunnels, DNS-facing connectivity, and Cloudflare access paths.
Änderungen an Remote-Zustand
Can create tunnels, route traffic, and update service exposure.
Publish-/Artefakt-Risiko
Can expose local or internal services to the network.
Empfohlene Kontrolle
Gate tunnel creation, route changes, token use, and service exposure.
Hinweise für Agent-Nutzung
Allow tunnel status checks; require approval before exposing endpoints or changing routes.
Installation
Weitere Installationsbefehle
macOS
Homebrewverifiziert · 100%
brew install cloudflaredlocal Homebrew formula metadata
MacPortsverifiziert · 94%
sudo port install cloudflaredMacPorts ports tree · net/cloudflared/Portfile · Quelle: api.github.com
Linux
Alpine Linux apkverifiziert · 92%
sudo apk add cloudflaredAlpine Linux edge package indexes · cloudflared · Quelle: dl-cdn.alpinelinux.org
Nixverifiziert · 92%
nix profile install nixpkgs#cloudflarednixpkgs package indexes · pkgs/by-name/cl/cloudflared/package.nix · Quelle: api.github.com
Arch Linux pacmanverifiziert · 92%
sudo pacman -S cloudflaredArch Linux sync databases · cloudflared · Quelle: geo.mirror.pkgbuild.com
openSUSE zypperverifiziert · 92%
sudo zypper install cloudflaredopenSUSE Tumbleweed package metadata · cloudflared · Quelle: download.opensuse.org
Windows
Chocolateyverifiziert · 92%
choco install cloudflaredChocolatey community package catalog · cloudflared · Quelle: community.chocolatey.org
Scoopverifiziert · 92%
scoop install main/cloudflaredScoop official bucket manifest trees · bucket/cloudflared.json · Quelle: api.github.com
Windows Package Managerverifiziert · 92%
winget install --id Cloudflare.cloudflared -eWindows Package Manager source index · Cloudflare.cloudflared · Quelle: cdn.winget.microsoft.com
Überblick
Paketzusammenfassung
Cloudflare Tunnel client (formerly Argo Tunnel)
Projektlinks
Befehle und Aliase
- cloudflared
Verlauf
Projektgeschichte und Nutzung
cloudflared is Cloudflare's Tunnel client, the daemon/CLI that establishes outbound-only connections from private infrastructure to Cloudflare's network. It grew out of the Argo Tunnel product line and became a central piece of Cloudflare One and Zero Trust access patterns.
Projektgeschichte
The official cloudflared repository was created in 2017, matching the period when Cloudflare was turning Argo Tunnel into a packaged client. Cloudflare now documents Cloudflare Tunnel as a connector that lets origins and private networks reach Cloudflare without opening inbound firewall ports.
The tool's role expanded from origin tunneling for web apps into a general Zero Trust connector: it can run as a service, authenticate tunnels with credential files, and support remotely managed tunnels through Cloudflare's dashboard and API.
Adoptionsgeschichte
cloudflared has unusually broad package-manager coverage for a vendor network daemon. The batch package metadata lists apk, Homebrew, Chocolatey, MacPorts, Nix, pacman, Scoop, winget, and zypper, reflecting demand across Linux servers, macOS developer machines, and Windows desktops.
Cloudflare's documentation and release cadence make cloudflared a common dependency in homelab, self-hosting, Kubernetes, CI, and enterprise Zero Trust deployments where operators want a reverse tunnel without exposing origin services directly.
Wie es verwendet wird
Operators use cloudflared to create, run, and supervise Cloudflare Tunnel connectors. Typical workflows include logging in, creating a tunnel, writing config.yml, storing a tunnel credentials JSON file, and running cloudflared as a foreground process or system service.
The same executable also covers DNS-over-HTTPS proxying and other Cloudflare network utility tasks, but the Homebrew package is primarily significant as the Cloudflare Tunnel client.
Warum Paket-Nerds sich dafür interessieren
cloudflared is a good example of a cloud vendor shipping a cross-platform networking daemon through mainstream package managers instead of only tarballs or curl-piped installers. Formula maintainers care about service integration, binary update speed, and config/credential paths because it is often run unattended.
Its packaging surface is broader than many cloud CLIs because it serves both developers and infrastructure operators: the same package can be used interactively on a laptop or as a long-running connector on a server.
Zeitleiste
- 2017: Official cloudflared GitHub repository was created.
- 2020: Public GitHub releases for cloudflared were available in the 2020.6.x line.
- 2022: Cloudflare Tunnel became part of the broader Cloudflare One connector documentation and product surface.
- 2026: cloudflared continued a date-versioned release cadence, including 2026.6.x releases.
Related projects
- Cloudflare Tunnel is the product surface that cloudflared implements as a connector.
- Cloudflare Access and Zero Trust policies commonly sit in front of applications exposed through cloudflared.
- Wrangler overlaps in the Cloudflare CLI ecosystem but is focused on Workers development rather than tunnel operations.
Quellen
Sicherheitslage
Risikostufe: orange
formula declares a Homebrew service. infrastructure mutation or orchestration signal.
Risikoklassifikator
orange Risiko · mittel Konfidenz · infrastructure
Warum
- formula declares a Homebrew service
- infrastructure mutation or orchestration signal
Signale
- metadata:service
- text:cloud
Installationsverhalten
- In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
- Formelmetadaten deklarieren einen Service- oder Daemon-Block.
- Homebrew-Bottle-Metadaten sind für 6 Plattformziele verfügbar.
- Build-Metadaten listen 1 Build-Abhängigkeiten.
Empfohlene Prüfung
Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- Unix
~/.cloudflared/config.yml$XDG_CONFIG_HOME/cloudflared/config.yml~/.config/cloudflared/config.yml
Credential files
Credential-bearing paths to review before unattended agent runs.
- Unix
~/.cloudflared/cert.pem~/.cloudflared/*.json$XDG_CONFIG_HOME/cloudflared/cert.pem$XDG_CONFIG_HOME/cloudflared/*.json~/.config/cloudflared/cert.pem~/.config/cloudflared/*.json
Executables
Installierte Executables
| Befehl | Art | Sichtbarkeit | Hinweis |
|---|---|---|---|
cloudflared | cli | globales Executable |
Aktualität
Version und Aktualität
Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.
Seite generiert2026-07-25
Manager-Version2026.7.3
Manager aktualisiert2026-07-23
lokale DatenOK
Upstreamaktuell
neueste erkannte Version2026.7.3
https://github.com/cloudflare/cloudflared
- OKEs wurden keine Aktualitätswarnungen generiert.
Installationsmetadaten
Paketmetadaten
| Paketschlüssel | brew:cloudflared |
|---|---|
| Version | 2026.7.3 |
| Paketmanager | Homebrew |
| Paketmanager-Seite | https://formulae.brew.sh/formula/cloudflared |
| Homepage | https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-tunnel/ |
| Repository | https://github.com/cloudflare/cloudflared |
| Upstream-Dokumentation | https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-tunnel |
| Lizenz | Apache-2.0 |
| Quellarchiv | https://github.com/cloudflare/cloudflared/archive/refs/tags/2026.7.3.tar.gz |
| Zuletzt aktualisiert | 2026-07-23T12:10:11Z |
| Pulse | updated |
| Build-Abhängigkeiten | go |
| Bottle | verfügbar (auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | nicht definiert |
| Dienst | declared |
Registry-Fakten
Details aus der Quelldatenbank
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | cloudflared |
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
Source-Datenbank-Treffer
Andere Paketmanager-Einträge
Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.
Nix95%
cloudflared
nix profile install nixpkgs#cloudflared- normalized package name match
- Abgeglichen nach: Cloudflared
apk95%
cloudflared 2026.6.0-r0
Cloudflare Tunnel client
https://github.com/cloudflare/cloudflared
sudo apk add cloudflared- License: Apache-2.0
- Architecture: x86_64
- Source Package: cloudflared
- 1 Abhängigkeiten
- 1 stellt bereit
- normalized package name match
- Abgeglichen nach: Cloudflared
apk95%
cloudflared-doc 2026.6.0-r0
Cloudflare Tunnel client (documentation)
https://github.com/cloudflare/cloudflared
sudo apk add cloudflared-doc- License: Apache-2.0
- Architecture: x86_64
- Source Package: cloudflared
- normalized package name match
- Abgeglichen nach: Cloudflared
apk95%
cloudflared-openrc 2026.6.0-r0
Cloudflare Tunnel client (OpenRC init scripts)
https://github.com/cloudflare/cloudflared
sudo apk add cloudflared-openrc- License: Apache-2.0
- Architecture: x86_64
- Source Package: cloudflared
- normalized package name match
- Abgeglichen nach: Cloudflared
pacman95%
cloudflared 2026.6.0-1
Command-line client for Cloudflare Tunnel
https://github.com/cloudflare/cloudflared
sudo pacman -S cloudflared- License: Apache-2.0
- Architecture: x86_64
- 1 Abhängigkeiten
- normalized package name match
- Abgeglichen nach: Cloudflared
zypper95%
cloudflared 2026.5.2-1.1
Cloudflare Tunnel client
https://github.com/cloudflare/cloudflared
sudo zypper install cloudflared- License: Apache-2.0
- Category: Productivity/Networking/System
- Architecture: x86_64
- Source Package: cloudflared
- 1 stellt bereit
- normalized package name match
- Abgeglichen nach: Cloudflared
MacPorts95%
cloudflared
sudo port install cloudflared- normalized package name match
- Abgeglichen nach: Cloudflared
Chocolatey95%
cloudflared
choco install cloudflared- normalized package name match
- Abgeglichen nach: Cloudflared
Scoop95%
main/cloudflared
scoop install main/cloudflared- normalized package name match
- Abgeglichen nach: Cloudflared
winget95%
Cloudflare.cloudflared
winget install --id Cloudflare.cloudflared -e- normalized package name match
- Abgeglichen nach: Cloudflared
Quellspur
Aus Repository-Daten generiert
Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.
Combined YAML source
View the package source record on GitHub.
Verwendete Quellen
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- curated agent safety answer
- curated configuration and credential file locations
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment