Cloudflared-windows-amd64.exe
First, ensure your config is ready. Then:
This article covers everything from download to advanced configuration. Cloudflared is the client that powers Cloudflare Tunnel (formerly Argo Tunnel). It establishes an encrypted connection between your origin server (your Windows PC) and Cloudflare’s edge. Traffic from the public internet hits Cloudflare, then travels through the tunnel to your local service.
Open or PowerShell and navigate to where cloudflared.exe lives, then run: cloudflared-windows-amd64.exe
cloudflared.exe tunnel run my-first-tunnel Your local service is now live at https://myapp.yourdomain.com . For persistent operation (reboots, logoffs), install Cloudflared as a Windows service.
cloudflared.exe tunnel create my-first-tunnel This creates a tunnel (with a UUID) and stores its credentials in .cloudflared . It also creates a tunnel configuration file template. First, ensure your config is ready
net start cloudflared Or use the Services GUI ( services.msc ). The service automatically runs at boot. | Local Service | Example URL | Config service line | |------------------------|--------------------------------------|--------------------------------------| | IIS (default website) | http://localhost:80 | service: http://localhost:80 | | Node.js dev server | http://localhost:3000 | service: http://localhost:3000 | | Jellyfin / Plex | http://localhost:8096 | service: http://localhost:8096 | | SMB / RDP (via Access) | tcp://localhost:3389 | service: tcp://localhost:3389 | | SSH | tcp://localhost:22 | service: tcp://localhost:22 |
If you run a web server on your Windows machine—whether for development, home automation, or a personal website—you know that exposing it to the internet can be risky. Port forwarding is messy, dynamic DNS is a hassle, and your ISP might block incoming traffic altogether. It establishes an encrypted connection between your origin
Enter and its Windows executable: cloudflared-windows-amd64.exe . This tool creates secure, outbound-only tunnels from your Windows PC to Cloudflare’s global edge network. No open firewall ports. No static IP required. Just fast, encrypted access from anywhere.
– Check logs: cloudflared.exe tunnel run --config C:\path\to\config.yml my-first-tunnel (run manually first).
Now, route traffic to a local service. For example, if you run a web app on localhost:3000 :