Cloudflare Tunnel-Based Network Infrastructure for Application Deployment
Article Sidebar
Main Article Content
Abstract
This study designs a secure and efficient network infrastructure using Cloudflare Tunnel to solve the challenge of exposing on-premise K3s services. By applying Zero Trust Network Access (ZTNA) principles and deploying a cloudflared connector inside the cluster, the solution provides stable and secure public endpoints without opening inbound ports. As a result, service management, security, and development/testing workflows become faster
Article Details
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
References
B. Burns, B. Grant, D. Oppenheimer, E. Brewer, and J. Wilkes, “Borg, Omega, and Kubernetes: Lessons learned from three container-management systems over a decade,” Queue, vol. 14, no. 1, pp. 70–93, 2016, doi: 10.1145/2898442.2898444.
K3s Project, “K3s—Lightweight Kubernetes,” K3s Documentation, 2026, accessed Jul. 13, 2026.
Kubernetes Authors, “kubectl port-forward,” Kubernetes Documentation, 2026, accessed Jul. 13, 2026.
ngrok, “Free Plan Limits,” ngrok Documentation, 2026, accessed Jul. 13, 2026.
A. Alanda, H. A. Mooduto, H. Amnur and M. Fadhel, "Scaling Kubernetes Architectures for High Availability in Cloud," 2025 International Conference on Computer Sciences, Engineering, and Technology Innovation (ICoCSETI), Jakarta, Indonesia, 2025, pp. 818-823, doi: 10.1109/ICoCSETI63724.2025.11020084.
S. Rose, O. Borchert, S. Mitchell, and S. Connelly, Zero Trust Architecture, NIST Special Publication 800-207. Gaithersburg, MD, USA: National Institute of Standards and Technology, 2020, doi: 10.6028/NIST.SP.800-207.
Cloudflare, “Cloudflare Tunnel,” Cloudflare One Documentation, 2026, accessed Jul. 13, 2026.
Kubernetes Authors, “DNS for Services and Pods,” Kubernetes Documentation, 2026, accessed Jul. 13, 2026.
Cloudflare, “Kubernetes Deployment Guide for Cloudflare Tunnel,” Cloudflare One Documentation, 2026, accessed Jul. 13, 2026.
Cloudflare, “Access Policies,” Cloudflare One Documentation, 2026, accessed Jul. 13, 2026.
J. E. Goldman and P. T. Rawles, Applied Data Communications: A Business-Oriented Approach, 4th ed. Hoboken, NJ, USA: John Wiley & Sons, 2004.
I. Čilić, P. Krivić, I. Podnar Žarko, and M. Kušek, “Performance evaluation of container orchestration tools in edge computing environments,” Sensors, vol. 23, no. 8, Art. no. 4008, 2023, doi: 10.3390/s23084008.
V. Kjorveziroski and S. Filiposka, “Kubernetes distributions for the edge: Serverless performance evaluation,” The Journal of Supercomputing, vol. 78, no. 11, pp. 13728–13755, 2022, doi: 10.1007/s11227-022-04430-6.
D. Rahman, H. Amnur, and I. Rahmayuni, “Monitoring Server dengan Prometheus dan Grafana serta Notifikasi Telegram”, jitsi, vol. 1, no. 4, pp. 133 - 138, Dec. 2020.
D. Yakubov and D. Hästbacka, “Comparative analysis of lightweight Kubernetes distributions for edge computing: Performance and resource efficiency,” arXiv preprint arXiv:2504.03656, 2025.
A. Valantasis, N. Makris, and T. Korakis, “Orchestration software for resource constrained datacenters: An experimental evaluation,” in Proc. 2022 IEEE 8th International Conference on Network Softwarization (NetSoft), Milan, Italy, 2022, pp. 121–126, doi: 10.1109/NetSoft54395.2022.9844043