代理安全

代理安全回答

cloudflared manages tunnels, DNS-facing connectivity, and Cloudflare access paths.

凭据访问

Reads tunnel credentials, Cloudflare tokens, and local tunnel config.

远程变更

Can create tunnels, route traffic, and update service exposure.

发布/制品风险

Can expose local or internal services to the network.

代理使用指南

Allow tunnel status checks; require approval before exposing endpoints or changing routes.

安装

其他安装命令

macOS

Homebrew已验证 · 100%

brew install cloudflared

local Homebrew formula metadata

MacPorts已验证 · 94%

sudo port install cloudflared

MacPorts ports tree · net/cloudflared/Portfile · 来源: api.github.com

Linux

Alpine Linux apk已验证 · 92%

sudo apk add cloudflared

Alpine Linux edge package indexes · cloudflared · 来源: dl-cdn.alpinelinux.org

Nix已验证 · 92%

nix profile install nixpkgs#cloudflared

nixpkgs package indexes · pkgs/by-name/cl/cloudflared/package.nix · 来源: api.github.com

Arch Linux pacman已验证 · 92%

sudo pacman -S cloudflared

Arch Linux sync databases · cloudflared · 来源: geo.mirror.pkgbuild.com

openSUSE zypper已验证 · 92%

sudo zypper install cloudflared

openSUSE Tumbleweed package metadata · cloudflared · 来源: download.opensuse.org

Windows

Chocolatey已验证 · 92%

choco install cloudflared

Chocolatey community package catalog · cloudflared · 来源: community.chocolatey.org

Scoop已验证 · 92%

scoop install main/cloudflared

Scoop official bucket manifest trees · bucket/cloudflared.json · 来源: api.github.com

Windows Package Manager已验证 · 92%

winget install --id Cloudflare.cloudflared -e

Windows Package Manager source index · Cloudflare.cloudflared · 来源: cdn.winget.microsoft.com

概览

软件包摘要

Cloudflare Tunnel client (formerly Argo Tunnel)

项目链接

命令和别名

cloudflared

历史

项目历史与用法

cloudflared is Cloudflare's Tunnel client, the daemon/CLI that establishes outbound-only connections from private infrastructure to Cloudflare's network. It grew out of the Argo Tunnel product line and became a central piece of Cloudflare One and Zero Trust access patterns.

项目历史

The official cloudflared repository was created in 2017, matching the period when Cloudflare was turning Argo Tunnel into a packaged client. Cloudflare now documents Cloudflare Tunnel as a connector that lets origins and private networks reach Cloudflare without opening inbound firewall ports.

The tool's role expanded from origin tunneling for web apps into a general Zero Trust connector: it can run as a service, authenticate tunnels with credential files, and support remotely managed tunnels through Cloudflare's dashboard and API.

采用历史

cloudflared has unusually broad package-manager coverage for a vendor network daemon. The batch package metadata lists apk, Homebrew, Chocolatey, MacPorts, Nix, pacman, Scoop, winget, and zypper, reflecting demand across Linux servers, macOS developer machines, and Windows desktops.

Cloudflare's documentation and release cadence make cloudflared a common dependency in homelab, self-hosting, Kubernetes, CI, and enterprise Zero Trust deployments where operators want a reverse tunnel without exposing origin services directly.

使用方式

Operators use cloudflared to create, run, and supervise Cloudflare Tunnel connectors. Typical workflows include logging in, creating a tunnel, writing config.yml, storing a tunnel credentials JSON file, and running cloudflared as a foreground process or system service.

The same executable also covers DNS-over-HTTPS proxying and other Cloudflare network utility tasks, but the Homebrew package is primarily significant as the Cloudflare Tunnel client.

为什么软件包爱好者会关心

cloudflared is a good example of a cloud vendor shipping a cross-platform networking daemon through mainstream package managers instead of only tarballs or curl-piped installers. Formula maintainers care about service integration, binary update speed, and config/credential paths because it is often run unattended.

Its packaging surface is broader than many cloud CLIs because it serves both developers and infrastructure operators: the same package can be used interactively on a laptop or as a long-running connector on a server.

时间线

2017: Official cloudflared GitHub repository was created.
2020: Public GitHub releases for cloudflared were available in the 2020.6.x line.
2022: Cloudflare Tunnel became part of the broader Cloudflare One connector documentation and product surface.
2026: cloudflared continued a date-versioned release cadence, including 2026.6.x releases.

Related projects

Cloudflare Tunnel is the product surface that cloudflared implements as a connector.
Cloudflare Access and Zero Trust policies commonly sit in front of applications exposed through cloudflared.
Wrangler overlaps in the Cloudflare CLI ecosystem but is focused on Workers development rather than tunnel operations.

来源

安全态势

风险级别：orange

formula declares a Homebrew service. infrastructure mutation or orchestration signal.

风险分类器

orange 风险 · 中置信度 · infrastructure

原因

formula declares a Homebrew service
infrastructure mutation or orchestration signal

信号

metadata:service
text:cloud

安装行为

formula 元数据中未记录 Homebrew post-install 钩子。
formula 元数据声明了服务或守护进程块。
Homebrew bottle 元数据适用于 6 个平台目标。
构建元数据列出 1 个构建依赖。

建议审查

在无人值守的代理使用前，请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix: ~/.cloudflared/config.yml$XDG_CONFIG_HOME/cloudflared/config.yml~/.config/cloudflared/config.yml

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix: ~/.cloudflared/cert.pem~/.cloudflared/*.json$XDG_CONFIG_HOME/cloudflared/cert.pem$XDG_CONFIG_HOME/cloudflared/*.json~/.config/cloudflared/cert.pem~/.config/cloudflared/*.json

可执行文件

已安装的可执行文件

命令	类型	暴露范围	备注
`cloudflared`	cli	全局可执行文件

新鲜度

版本和新鲜度

这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。

页面生成时间2026-07-25

管理器版本2026.7.3

管理器更新时间2026-07-23

本地数据OK

上游当前

检测到的最新版本2026.7.3

https://github.com/cloudflare/cloudflared

OK没有生成新鲜度警告。

安装元数据

软件包元数据

软件包键	brew:cloudflared
版本	2026.7.3
软件包管理器	Homebrew
软件包管理器页面	https://formulae.brew.sh/formula/cloudflared
主页	https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-tunnel/
仓库	https://github.com/cloudflare/cloudflared
上游文档	https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-tunnel
许可证	Apache-2.0
源码归档	https://github.com/cloudflare/cloudflared/archive/refs/tags/2026.7.3.tar.gz
最后更新	2026-07-23T12:10:11Z
Pulse	updated
构建依赖	go
Bottle	可用 (于 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install	未定义
服务	declared

注册表事实

源数据库详情

Source Database	Homebrew formula API
Tap	homebrew/core
Full Name	cloudflared
Version Scheme	0
Revision	0
Head Version	HEAD
Bottle Stable Root URL	https://ghcr.io/v2/homebrew/core
Deprecated	no
Disabled	no
Keg Only	no
URL Keys	head stable

源数据库匹配

其他软件包管理器记录

匹配项来自外部软件包管理器索引，并与本地 Automic Vault 软件包链接分开显示。

Nix95%

cloudflared

nix profile install nixpkgs#cloudflared

normalized package name match
匹配方式：Cloudflared

nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/cl/cloudflared/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

apk95%

cloudflared 2026.6.0-r0

Cloudflare Tunnel client

https://github.com/cloudflare/cloudflared

sudo apk add cloudflared

License: Apache-2.0
Architecture: x86_64
Source Package: cloudflared
1 依赖
1 提供
normalized package name match
匹配方式：Cloudflared

Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: cloudflared from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz

apk95%

cloudflared-doc 2026.6.0-r0

Cloudflare Tunnel client (documentation)

https://github.com/cloudflare/cloudflared

sudo apk add cloudflared-doc

License: Apache-2.0
Architecture: x86_64
Source Package: cloudflared
normalized package name match
匹配方式：Cloudflared

Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: cloudflared-doc from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz

apk95%

cloudflared-openrc 2026.6.0-r0

Cloudflare Tunnel client (OpenRC init scripts)

https://github.com/cloudflare/cloudflared

sudo apk add cloudflared-openrc

License: Apache-2.0
Architecture: x86_64
Source Package: cloudflared
normalized package name match
匹配方式：Cloudflared

Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: cloudflared-openrc from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz

pacman95%

cloudflared 2026.6.0-1

Command-line client for Cloudflare Tunnel

https://github.com/cloudflare/cloudflared

sudo pacman -S cloudflared

License: Apache-2.0
Architecture: x86_64
1 依赖
normalized package name match
匹配方式：Cloudflared

Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: cloudflared from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

zypper95%

cloudflared 2026.5.2-1.1

Cloudflare Tunnel client

https://github.com/cloudflare/cloudflared

sudo zypper install cloudflared

License: Apache-2.0
Category: Productivity/Networking/System
Architecture: x86_64
Source Package: cloudflared
1 提供
normalized package name match
匹配方式：Cloudflared

openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: cloudflared from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst

MacPorts95%

cloudflared

sudo port install cloudflared

normalized package name match
匹配方式：Cloudflared

MacPorts ports tree · api.github.com · MacPorts ports tree: net/cloudflared/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

Chocolatey95%

cloudflared

choco install cloudflared

normalized package name match
匹配方式：Cloudflared

Chocolatey community package catalog · community.chocolatey.org · Chocolatey community package catalog: cloudflared from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','chocolatey-preinstaller-checks.extension'

Scoop95%

main/cloudflared

scoop install main/cloudflared

normalized package name match
匹配方式：Cloudflared

Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/cloudflared.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

winget95%

Cloudflare.cloudflared

winget install --id Cloudflare.cloudflared -e

normalized package name match
匹配方式：Cloudflared

Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: Cloudflare.cloudflared from https://cdn.winget.microsoft.com/cache/source.msix

软件包图谱

链接来自本地软件包关系图、补充数据、依赖边、生态匹配和软件包 hub 归属。

来源线索

由仓库数据生成

此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。

Combined YAML source

View the package source record on GitHub.

combined/cloudflared.yml

使用的来源

Geiger risk classifier
Nucleus package database
av.db category and tag curation
cross-ecosystem install command graph
curated agent safety answer
curated configuration and credential file locations
curated package history
external package-manager database matches
package relationship graph
package version freshness
package-page enrichment

使用 Homebrew, apk, chocolatey, MacPorts, Nix, pacman, zypper, scoop, winget 安装 cloudflared

代理安全回答

凭据访问

远程变更

发布/制品风险

推荐控制

代理使用指南

其他安装命令

macOS

Linux

Windows

软件包摘要

项目链接

命令和别名

项目历史与用法

项目历史

采用历史

使用方式

为什么软件包爱好者会关心

时间线

Related projects

来源

风险级别：orange

风险分类器

原因

信号

安装行为

建议审查

Configuration and credential file locations

Configuration files

Credential files

已安装的可执行文件

版本和新鲜度

软件包元数据

源数据库详情

其他软件包管理器记录

由仓库数据生成

Combined YAML source

使用的来源

使用 Homebrew, apk, chocolatey, MacPorts, Nix, pacman, zypper, scoop, winget 安装 cloudflared

代理安全回答

凭据访问

远程变更

发布/制品风险

推荐控制

代理使用指南

其他安装命令

macOS

Linux

Windows

软件包摘要

项目链接

命令和别名

项目历史与用法

项目历史

采用历史

使用方式

为什么软件包爱好者会关心

时间线

Related projects

来源

风险级别：orange

风险分类器

原因

信号

安装行为

建议审查

Configuration and credential file locations

Configuration files

Credential files

已安装的可执行文件

版本和新鲜度

软件包元数据

源数据库详情

其他软件包管理器记录

内部软件包链接

主题 hub

相关工具

相同工作流

代理安全指南

由仓库数据生成

Combined YAML source

使用的来源