– Cloudflared does not listen on ports locally (it connects outbound). The error may be your local web server.

Start small: run a one-off tunnel to a test website. Then graduate to a named tunnel with a custom domain and persistent Windows service. You’ll never mess with port forwarding again. Cloudflared is maintained by Cloudflare, Inc. This guide is unofficial but follows best practices as of 2025.

Enter and its Windows executable: cloudflared-windows-amd64.exe . This tool creates secure, outbound-only tunnels from your Windows PC to Cloudflare’s global edge network. No open firewall ports. No static IP required. Just fast, encrypted access from anywhere.

cloudflared.exe service install This creates a service named “Cloudflare Tunnel Agent”. Start it:

– Check logs: cloudflared.exe tunnel run --config C:\path\to\config.yml my-first-tunnel (run manually first).

Invoke-WebRequest -Uri "https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-windows-amd64.exe" -OutFile "$env:USERPROFILE\Downloads\cloudflared.exe" Move it to a permanent location, e.g., C:\cloudflared\cloudflared.exe , and add that folder to your PATH for easy access. Cloudflared needs to authenticate with your Cloudflare account.

This article covers everything from download to advanced configuration. Cloudflared is the client that powers Cloudflare Tunnel (formerly Argo Tunnel). It establishes an encrypted connection between your origin server (your Windows PC) and Cloudflare’s edge. Traffic from the public internet hits Cloudflare, then travels through the tunnel to your local service.

Open or PowerShell and navigate to where cloudflared.exe lives, then run:

cloudflared.exe tunnel login A browser window will open. Log in to your Cloudflare account and select the domain you want to use. This generates a cert.pem file in %USERPROFILE%\.cloudflared\ . That certificate is your global API credential—keep it safe. Tunnels are persistent connections with their own configuration. Let’s create one.

If you run a web server on your Windows machine—whether for development, home automation, or a personal website—you know that exposing it to the internet can be risky. Port forwarding is messy, dynamic DNS is a hassle, and your ISP might block incoming traffic altogether.

For TCP services, you must also set up Cloudflare Access (or use cloudflared access tcp on the client side). For temporary sharing (e.g., a demo), you don’t even need a domain. Run:

First, ensure your config is ready. Then: