Cloudflare Tunnel Gets a Management Dashboard

Cloudflare Tunnel lets services reach Cloudflare through an outbound-only connection from cloudflared, the lightweight connector that runs inside your infrastructure. This eliminates the need to open inbound firewall ports, whether you are exposing internal apps protected by Zero Trust policies, serving websites from Kubernetes clusters, or supporting a Raspberry Pi hobby project.

A new UI in the Cloudflare for Teams Dashboard gives operators who manage many tunnels a clearer picture of tunnel status, routes, uptime, connectors, and cloudflared versions. The dashboard also includes an interactive guide for first-time tunnel setups.

Simplified Onboarding

The onboarding flow now offers step-by-step pathways for macOS, Windows, and Linux that cover two primary scenarios:

  1. Connecting an origin to Cloudflare
  2. Connecting a private network via WARP to Tunnel

The guide walks through every command needed to create, route, and run a tunnel, while flagging validation commands as guardrails along the way. Once the tunnel is established, it is immediately viewable and manageable from the dashboard.

Tunnel List, Status, and Uptime

The new interface provides functionality similar to CLI commands such as cloudflared tunnel list or cloudflared tunnel info, but with a visual, interactive dashboard. Users can search by name or filter by name, status, uptime, or creation date. Key metrics for status and uptime receive particular emphasis.

A tunnel’s status is determined by the health of its connections:

  • Active: The tunnel runs with a healthy connection to the Cloudflare network.
  • Inactive: The tunnel is not running and has no connection to Cloudflare.
  • Degraded: One or more of the four long-lived TCP connections has dropped, but the origin continues to serve traffic.

Uptime measurements also derive from connection health. The calculation starts when the first of the four TCP connections establishes a link with the Cloudflare edge, using the UTC timestamp. If that connection terminates, uptime continues tracking as long as one of the other three connections remains active. If no connections are operational, uptime resets to zero.

Routes and Connector Replicas

Since Named Tunnels became available, a single tunnel can route traffic to many services via Ingress Rules. The dashboard shows these varied destinations when you hover over a route’s value, covering DNS records, load balancers, and private IP ranges.

For those running cloudflared replicas to achieve high availability and scalability, expanding a tunnel in the UI reveals the number of replicas, along with their connection status, data center, IP address, and version. Tunnel deletion is also handled directly from the dashboard.

Roadmap

Future dashboard updates will incorporate additional Cloudflare Tunnel analytics. The near-term focus is improving the onboarding experience for new users and extending more of those capabilities into the Teams Dashboard.