VPN and Cloudflare tunnels reddit / selfhosted ---------------------------------------------------------------------- Duckysens · 2023-09-30 14:49 So i used to just have a VPN like wireguard and just access stuff like my nas without https because nothing was open to the world everything was local. But now i use Cloudflare tunnels but they are restricted to only my external ip so i still need to be connected to the vpn to be able to acces the cloudflare tunnels from outside my house, My question is is this as secure or more secure or less secure then just using a vpn? ---------------------------------------------------------------------- AnnualOasis · 2023-09-30 15:09 >But now i use Cloudflare tunnels but they are restricted to only my external ip so i still need to be connected to the vpn to be able to acces the cloudflare tunnels from outside my house, Um…what? >My question is is this as secure or more secure or less secure then just using a vpn? VPN is always going to be the most secure ---------------------------------------------------------------------- Duckysens · 2023-09-30 15:14 You can create an application for your tunnel with the policy ip ranges if u put only your external ip in the ip range you can only access it from local or with vpn to local. Is vpn also the most secure if im not using https then? ---------------------------------------------------------------------- AnnualOasis · 2023-09-30 15:29 > You can create an application for your tunnel with the policy ip ranges if u put only your external ip in the ip range you can only access it from local or with vpn to local. what would be the point of this? cloudflare tunnels are for remote access, if you restrict it to only access from within your network, you're adding a lot of overhead for nothing. >Is vpn also the most secure if im not using https then? I'm not sure how to answer this question. HTTPS encrypts remote traffic to prevent MITM attacks. If it's a local connection, the only benefit to using HTTPS is if you are worried about MITM on your local network (or find the browser warning notifications annoying). ---------------------------------------------------------------------- Duckysens · 2023-09-30 15:59 >MITM I thought using cloudflare tunnels for the https and then restrict them to only local so i still had the benefit of vpn but if just vpn works better il go back to that Thanks for the help! ---------------------------------------------------------------------- AnnualOasis · 2023-09-30 16:04 You don’t need cloudflare to generate SSL certificates… ---------------------------------------------------------------------- Duckysens · 2023-09-30 16:06 Il just try that ---------------------------------------------------------------------- chronop · 2023-09-30 16:06 just use a different auth method like github/google and only authorize your email address ---------------------------------------------------------------------- opensrcdev · 2023-09-30 16:48 In your case, given how locked-down your endpoints are (by specific IP), I'd skip over using Cloudflare Tunnels and stick with a VPN or ZeroTier / Tailscale. With CF Tunnels, you get TLS encryption up to the CDN, so it's extremely secure as far as MITM attacks go. However, each application exposed through CF Tunnels is subject to its own security review. A single vulnerability in one application can allow an attack access to your entire network.