openTunnel (tunnel)

An open-source wrapper around cloudflared that turns Cloudflare Tunnel management into a single interactive CLI.

tunnel handles the full lifecycle — from installing cloudflared itself, to creating tunnels, mapping domains, configuring DNS, managing Zero Trust Access, and running the service — all through an interactive menu or scriptable subcommands.

中文文档

Features

• cloudflared lifecycle management — auto-installs cloudflared if missing (Linux/macOS/Windows), installs/starts/restarts the system service
• Quick domain mapping — map app.example.com → localhost:3000 in one step, with automatic DNS record creation
• Full tunnel operations — create, list, delete tunnels; add/remove/show ingress mappings
• DNS management — list, add, delete records; sync tunnel routes to DNS automatically
• Zero Trust Access — create/delete applications, manage access policies
• Service control — install, start, stop, restart cloudflared service; view logs
• Monitoring — health check, tunnel stats, real-time monitor, local port scanner
• Bilingual — English and Chinese, switchable at runtime

Install

From source

cargo install --path .

Or build manually

cargo build --release
cp target/release/tunnel /usr/local/bin/

Quick start

# 1. Configure your Cloudflare API token
tunnel config set

# 2. Launch interactive menu
tunnel

# 3. Or use subcommands directly
tunnel list                          # list tunnels
tunnel map app.example.com http://localhost:3000   # map a domain
tunnel dns sync --tunnel <ID>        # sync DNS records
tunnel service install --tunnel <ID> # install & start cloudflared service
tunnel scan                          # discover local services

CLI reference

Tunnel

Domain mapping

DNS

Zero Trust Access

Service (cloudflared)

Config

Utilities

How it works

┌──────────────┐     Cloudflare API      ┌─────────────────────┐
│  tunnel CLI  │ ──────────────────────── │  Cloudflare Edge    │
│  (this tool) │     (tunnel/dns/access)  │  ── Tunnel routing  │
└──────┬───────┘                          │  ── DNS records     │
       │                                  │  ── Access policies │
       │  manages                         └─────────────────────┘
       ▼
┌──────────────┐     cloudflared tunnel   ┌─────────────────────┐
│  cloudflared │ ════════════════════════ │  Your local services│
│  (service)   │     (persistent conn)    │  :3000, :8080, etc. │
└──────────────┘                          └─────────────────────┘

tunnel talks to the Cloudflare API for configuration (tunnels, DNS, Access) and manages cloudflared as a system service for the actual traffic proxying.

Language

Set language by priority:

1. --lang en|zh
2. CFT_LANG environment variable
3. Saved config (~/.cft/config.json)
4. System locale

Paths

Contributing

Issues and PRs welcome. Before submitting:

cargo fmt
cargo clippy -- -D warnings
cargo test

License

MIT