Cloudflare ZTNA
1. Overview
The Cloudflare ZTNA add-on creates a zero-trust tunnel via cloudflared, allowing you to expose Flows, Apps, and other Add-ons to the internet through your Cloudflare account, without needing to open ports in the environment.
Use it when you need to make a Flow, App, or Add-on available publicly (or to a controlled group of users) using Cloudflare's Zero Trust network as the access layer, instead of exposing the service directly.
Catalog tags: ZTNA, Tunnel, Cloudflare.
2. Prerequisites
- A Cloudflare account with Zero Trust enabled.
- A tunnel created in the Cloudflare Zero Trust dashboard, with the connector token copied from it.
3. Deploy Step-by-Step
Step 1 — General
| Field | Required | Description |
|---|---|---|
| Add-on Name | Yes | Name of the add-on within the environment. Lowercase letters, numbers, and hyphens only (3 to 63 characters). |
| Cloudflare tunnel token | Yes | Connector token, copied from the tunnel created in the Cloudflare Zero Trust dashboard. Authorizes the cloudflared pod to register with that tunnel. |
Tunnel targets (exposed Flows, Apps, or Add-ons) are not configured in this step — they're added after creation, on the Settings tab of the already-deployed add-on.
Clicking Deploy Add-on starts the deployment. The add-on then appears on the environment's My Add-ons tab.
TODO: steps 2, 3, and 4 of the wizard haven't been detailed yet — only the numbers appear on screen, with no visible label. Complete once the following screens are provided.
4. After Deployment
TODO: describe how to add targets (Flows/Apps/Add-ons) on the add-on's Settings tab, and how to confirm the tunnel is active in the Cloudflare dashboard.
5. FAQ
Where do I create the tunnel and get the connector token? In the Cloudflare Zero Trust dashboard, by creating a new tunnel. The token generated there is pasted into the Cloudflare tunnel token field of this wizard.
Can more than one Flow/App/Add-on be exposed on the same tunnel? TODO: confirm whether a single Cloudflare ZTNA add-on supports multiple simultaneous targets.