9 ms·

Cloudflare Quick Tunnels

833 points by jcbhmr 1mo ago

rvz 1mo ago
Seems like the quality of software engineering is now going to zero and just vibe coding unstable alternatives since 2023.
smalltorch 1mo ago
It's a nice ability, but I dont like the terms of use.
- ZeroCool2u 1mo ago
  Anything specific to watch out for?
- whizzter 1mo ago
  On what url were those? Or Cloudflare's TOS in general ?
user3939382 1mo ago
I just spent a week writing a harness around the existing tunnels to make this by hand.
dangoodmanUT 1mo ago
Historically, we’ve found that their tunnels have really high latency variance. For example something that’s normally 30-50ms to ec2 is now 115ms-750ms
- hackernud3s 1mo ago
  Because it travels along their edge. It's apples and oranges to your AWS tunnel.
  - dangoodmanUT 1mo ago
    No, they claim their edge is better for residential connections to your backend. We tried multiple SF to us-east-1 and it was always substantially worse
ThrowawayTestr 1mo ago
No-ip gives out free dynamic DNS with a static URL. I use it for Sunshine desktop streaming when I travel.
- cuu508 1mo ago
  Yeah, but then you are always exposing your public IP.
  - monster_truck 1mo ago
    Exposing it to what exactly? The internet? Yes that's how it works
    - johng 1mo ago
      This requires no port forwarding, so someone brute force scanning your IP won't find this and your open port. they also might have a harder time figuring out what service has been exposed since the port number itself will be unknown.
    - cuu508 1mo ago
      If somebody learns that such-and-such DynDNS URL is mine, they can always do a DNS lookup to find my current IP address. They can: - find my approximate physical location - regularly scan ports on my IP and wait for me to accidentally expose a service I didn't mean to - track me in any access logs they have access to
      - mitxela 1mo ago
        They can, and do, do this with or without DynDNS.
        cuu508 1mo ago
        Do you mean by getting the information from Cloudflare, or some other way? With DynDNS though, finding out my IP is trivial and does not require any special powers or skills, it is just a DNS lookup. PS. Just re-watched your matrix LED pendant video. It is so well done, both the project, and the accompanying video!
altmanaltman 1mo ago
[flagged]
kincl 1mo ago
Is this their version of https://tailscale.com/tailcat https://tailscale.com/tailcat ? I can't tell if you need to auth edit: yeah, it says no account creation, neat!
- hermanradtke 1mo ago
  feels more like an ngrok competitor
  - israrkhan 1mo ago
    This is a crowded space with lots of solutions (oss and commercial) https://github.com/anderspitman/awesome-tunneling https://github.com/anderspitman/awesome-tunneling
- alasano 1mo ago
  More like their version of Tailscale funnel I think
- Tepix 1mo ago
  I believe with tailscale you don’t have to trust a 3rd party with your cleartext traffic
  - athrowaway3z 1mo ago
    But you do seem to get to host a https version of your app in case you need features locked behind secure context.
  - spwa4 1mo ago
    That can't be right. If they're hosting on a different DNS they have an absolute need to MITM ssl/tls traffic. Can't work otherwise. So cloudflare sees your plaintext. Btw: tailscale does not (but ssl errors and warnings are unavoidable)
ZeroCool2u 1mo ago
This is handy, but I wonder how much it will cannibalize their services. I have a simple app deployed on cloudflare for a very niche single purpose use, but I wouldn't have bothered if I had this. Serving it from my own machine would have been fine.
- aniviacat 1mo ago
  Cloudflare Tunnels has been a free service of Cloudflare for quite a while now. What's new is being able to use them without needing an account.
  - bakugo 1mo ago
    It's not new. Maybe this page is new, but being able to set up a quick tunnel on trycloudflare.com without an account has been a thing for years.
- roncesvalles 1mo ago
  Not many people run their local machine 24/7.
  - berofeev 1mo ago
    What does reality look like on this nowadays? My initial thought was desktops generally run 24/7, with laptops running when in use. At least for the customer at the market intersection for this type of product.
    - JavierFlores09 1mo ago
      I often tell my dev colleagues to avoid having their PC turned on all the time, be it because of the electricity bill cost, environmental impact or simply to make the longevity of the hardware a little longer. Granted almost everyone just ignores those things even if they're conscious of it, so I'd say you're right
      - 1mo ago
aliasxneo 1mo ago
Tunneling was something that recently fell out of the work I've been doing [1]. I've used Cloudflare Tunnels before but I just have low trust with them recently with how big they are getting. All of these nice things come at the cost of pushing _a lot_ of traffic through their systems. [1]: https://dntls.substack.com/p/the-new-internet https://dntls.substack.com/p/the-new-internet
- afzalive 1mo ago
  This is pretty great and I think this will be quite important in the age where everyone has their self-hosted services.
- simonw 1mo ago
  If there's any company in the world that can survive a lot of extra traffic being pushed through their systems it's Cloudflare. I bet these new tunnels end up being a fraction of a percentage point of their network traffic.
  - aliasxneo 1mo ago
    Yeah, I don't doubt their infrastructure at all. In fact, I rate them fairly high in terms of reliability and performance. I've honestly been a fan of them for a very long time - it's just I'm watching all of this centralization happen and it sets my Spidey sense off. Like I'm waiting for the other shoe to drop.
    - simonw 1mo ago
      Gotcha, that totally makes sense.
    - swozey 1mo ago
      The "centralization" which is cloudflare basically running its own walled garden version of the interent (how often do you see a cloudflare page checking if you're human?) is exactly why a lot of people do NOT like cloudflare. And if you've known about CF and its leadership since their inception you'd be even more wary of sticking your stuff over there. I've migrated many companies off of cloudflare, usually because they end up pissing off companies when a contract renewal comes up and they slam them with massively increased bills and almost useless support if you aren't very high paying enterprise. I don't know how many CF support tickets I've just given up on over the last 15 years, usually related to their admin page, workers or some weird thing their system does that wasn't documented and I just stop getting responses and definitely don't get fixes. If you ever worked in webhosting the Cloudflare wordpress/etc extensions are everywhere and back when I did work in hosting tons of support tickets were made because of CF. Could be way better now, I don't go near that industry these days. The casual CF user sticking it in front of a blog they rarely look at and the business forced CF user has a very different experience. I cringe and seriously consider if I'm interviewing for an infra role and they use cloudflare. Usually it's startups that grew into larger businesses.
whizzter 1mo ago
Don't all these free proxy services always fall prey to blacklists because scammers,etc abuse them until they're useless?
- Imustaskforhelp 1mo ago
  Yes they actually do, but because its cloudflare which is offering this, blacklisting it might lead to blacklisting can be more negative and cloudflare has a much higher incentive to not make these tunnels useless. They are also more powerful and can fix things which would be harder for smaller companies to handle (atleast within the context of cloudflare tunnels)
  - mitxela 1mo ago
    Spain blacklisted Cloudflare and everyone hates it, but it proves it can happen.
- axus 1mo ago
  Wow, exfiltrating data has never been easier!
- srichard16 1mo ago
  Can confirm. Coming from ngrok, the main reason we had to make tunneling not anonymized etc was because of scammers, etc on the internet. Other players in the space bypass this by open sourcing the tech, or separating the architecture entirely. This is cool and all, but ultimately gives nefarious actors on the internet more opportunities.
  - noname120 1mo ago
    How does “open sourcing the tech” “give nefarious actors on the internet more opportunities”? Sounds like a paltry excuse for not open sourcing your tech.
- uxjw 1mo ago
  Probably why they used the trycloudflare.com domain as they expect it to be blocked.
JV00 1mo ago
Does this have a more generous allowance than ngrok? From what I can read no limits are mentioned
- daemonologist 1mo ago
  I don't know if there's an overall limit, but their regular tunnels have a limit of 100 MB per request which breaks stuff like Immich.
- raahelb 1mo ago
  These are the limitations mentioned on the docs [1]. Quick Tunnels are subject to a hard limit on the number of concurrent requests that can be proxied at any point in time. Currently, this limit is 200 in-flight requests. If a Quick Tunnel hits this limit, the HTTP response will return a 429 status code. Quick Tunnels do not support Server-Sent Events (SSE). [1]: https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-tunnel/do-more-with-tunnels/trycloudflare/#limitations https://developers.cloudflare.com/cloudflare-one/networks/co...
Narciss 1mo ago
My AI discovered this days ago when I wanted to deploy a new vibe coded website (it was to keep score while playing whist and rentz) Thought it was very cool
smalltorch 1mo ago
If your a hobbiest or dev just testing your services, it makes more sense to utilize onion services imho. It does the exact same thing, except supported by a global network of volunteers around the world. Sure, you get some latency, but this is actually ideal for testing. You should know how your service operates in non optimal lightning fast conditions.
- thenewnewguy 1mo ago
  I honestly can't tell if you're trolling or this is an HN out of touch moment. The obvious difference (and thus massive advantage) of the cloudfare product is that it is accessible over the normal internet without needing to install a tor client. I'm sure that works for some subset of the population where all potential users are already comfortable using Tor; but imagine trying to share your PoC website with the designer/client and you are asking them to install Tor browser.
  - smalltorch 1mo ago
    >hobbiest or dev just testing your services Is different than sharing your work with a client. I personally wouldnt make it SOP to utilize a complely free service like this to share my work. I'm not saying it's not convient, it definitely is. But you shouldn't subject a clients product to terms they probably aren't aware of.
himata4113 1mo ago
This has existed for a long time and has been abused by quite a few people. I've seen some cc nodes using a random known cloudflare site and spoofing hostname to a temporary cloudflare site. IMO this should require a login at bare minimum.
- booi 1mo ago
  if you think people won't abuse it because you're making them log in with a free email address...
  - himata4113 1mo ago
    This requires zero effort and you can deploy hundreds to thousands while maintaining 1000 gmail, proton etc takes resources and money.
    - booi 1mo ago
      They already do this. the email accounts already exist
      - himata4113 1mo ago
        It's the same reason that exists for PoW captcha, it's just way more annoying. Also accounts offer traceability versus a new identity every time you want to do something unless you want to go through hundreds of accounts a day.
cute_boi 1mo ago
what a sloppy website, did cloudflare fired bunch of ui/ux designer? Every text is slop lol.
- usewik 1mo ago
  yep, and all those fired and remaining are busy ai-native proofing their careers and tokenmaxxing everything including copy
- cub-creature 1mo ago
  I swear if I see one more "pill-badge callout -> header -> subtitle" with gradient background and hover-cards landing page I'm going to crash out
  - deleted 1mo ago
    [deleted]
xeornet 1mo ago
Looks like they straight up vibe coded the landing page lol.
- rozab 1mo ago
  I find it quite shocking that orgs with some great designers like cloudflare are doing this. Broken layouts, trios of random uppercase words sprinkled around. It's crazy. How does it inspire confidence in a product, knowing that the landing page was created in 10 seconds?
  - maipen 1mo ago
    AI took all the effort, so I guess nobody sees value in these little pages anymore. Not even those being paid. It's actually scary.
075326899532 1mo ago
[ad]
tombert 1mo ago
I like Cloudflare Tunnels a lot, but something that annoys me is that officially you're not allowed to use them for streaming video, meaning I can't put it in front of my Jellyfin without breaking TOS. I think that rule is more of a "we reserve the right to..." rule, but it makes me sad because I'd rather not open up ports on my router to expose my Jellyfin to my parents.
- TonyStr 1mo ago
  I discovered and set this up the other day, added jellyfin, immich and forgejo and was really happy about the result for five minutes, before I discovered that limitation in the TOS. Now I only use it for forgejo. Have you found a different solution to exposing jellyfin?
  - tombert 1mo ago
    I have a proxy set up with the Oracle Always Free VMs they provide. It works well enough.
  - madeforhnyo 1mo ago
    For free idk, I personally use a VPS (with unlimited traffic) and Tailscale. Someone has to pay for the public IP and proxy.
  - guluarte 1mo ago
    i just use wireguard or tailscale, provision a subdomain with a custom ssl and resolve to a nat ip.
- tamimio 1mo ago
  Use pangolin (you can self host), been using it for a while and it’s great, under the hood it’s a vpn+reverse proxy which you can do yourself too. In pangolin you can have public or private resources, where private ones you need to authenticate through pangolin first (either pass or others like pin number for your parents so easy to remember). When you link your domain for public ones, I suggest you make a sub domain for it, so your apps will be a sub to your subdomain, that way you keep control of your main domain while having automatic assignment for your apps rather than manually, and if you didn’t issue a certificate, that sub.subdomain is basically invisible on the internet unless you host a service to expose it.
rplnt 1mo ago
Are we in an age where no one even bothers to open the product pages they generate? The first subtitle with the font color almost matching the background. Or it's even worse that a human looked at it and said "yep, that's OK"?
- reaperducer 1mo ago
  Are we in an age where no one even bothers to open the product pages they generate? We live in an age of monkey-see-monkey-do management. When Microsoft axed its QA team, it gave permission for everyone else to make the same stupid mistake.
  - rvz 1mo ago
    We are in the age of where hype beats reasoning.
    - pocksuppet 1mo ago
      Since before 2016 actually
- lkbm 1mo ago
  It's fine on light mode. It's just the dark mode that's terrible. Seems likely they only tested the former.
  - rplnt 1mo ago
    I see, good point. Some might be confused about my comment then.
  - brazukadev 1mo ago
    which proves the point OP is making.
  - Gigachad 1mo ago
    I'm viewing the site on lightmode, clicked one of the #links which scrolled down the page, when I scrolled back up all the sections lost their content and were unusable. I've never seen someone fail a static page like this. And from a huge company like Cloudflare too..
israrkhan 1mo ago
For someone looking for an opensource solutions, following is an awesome resource for tunnelling https://github.com/anderspitman/awesome-tunneling https://github.com/anderspitman/awesome-tunneling I have played around with frp, bore and ngrok.
- drdexebtjl 1mo ago
  frp is nice. I have the tiniest Amazon Lightsail instance running a tunnel to a Minecraft server in my basement. It’s cheaper than getting a fixed IP from my ISP, at sufficiently low traffic.
damsta 1mo ago
The website looks broken in dark mode on Firefox.
ggg011012 1mo ago
Quick Tunnels look great for demos and temporary dev environments. I’d still be hesitant to make them part of a long-lived production setup.
- pstoll 1mo ago
  You should be more than hesitant - don’t do it. They literally market them for quick demos. And not long lived production.
- rinconrex 1mo ago
  I use for the exact same thing. Running "cloudflared tunnel" sets up a temp solution. No log in needed, pretty convenient.
kelvinjps10 1mo ago
What's the difference between this and their previous Cloudflare Tunnels solution?
- raahelb 1mo ago
  From their docs [0]: > Free tunnels are meant to be used for testing and development, not for deploying a production website. [0: https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-tunnel/do-more-with-tunnels/trycloudflare/#why-does-cloudflare-provide-this-service-for-free https://developers.cloudflare.com/cloudflare-one/networks/co...
- awwaiid 1mo ago
  As far as I can tell, the difference is that they made a new website? The cloudflared instant tunnels have been around for years, including json output as far as I know.
- opengrass 1mo ago
  This gives a random trycloudflare.com subdomain each run, the other requires a domain and tunnel key on your account.
singpolyma3 1mo ago
It looks like tunnels can do some non https stuff these days? But it's a bit unclear
AtNightWeCode 1mo ago
Cool but the obvious flaw with this is that CF leaks DNS-records. So bots will find these urls instantly. Not sure why they have not fixed that or if it is even possible to fix.
nullbyte 1mo ago
Love this, very cool. I used to use a service called ngrok for this, but it's nice that Cloudflare is offering one now.
usewik 1mo ago
how long until someone's agent sets up a tunnel for the world to see one's most sensitive, private and embarrassing information or insecure work-in-progress app? granted, for the brew install some massive permissions are needed, so hopefully for those running their agent's in a sandbox, you should be safe.. should be..
frankcostanza 1mo ago
So... Cloudflare built Ngrok?
_pdp_ 1mo ago
It will be nice if it had persistent URLs and and SDK for desktop applications. It could solve a lot of small issues for a project I am currently busy with.
- yodon 1mo ago
  That's handled by all the prior releases of cloudflare tunnels
- srichard16 1mo ago
  ngrok does this free, but with an account
- cmacleod4 1mo ago
  I've been running a couple of websites* on a home machine behind a Cloudflare tunnel for 2-3 years now. The only thing I had to pay for was the DNS registration. There are limits on the traffic you can serve on their free plan, but I'm nowhere near reaching those. I don't know what an SDK would add, you just set up a web server using whatever method suits you, then configure the cloudflared to connect to that. I did find that the online dashboard could not support all the options I wanted, so I switched to using the config file method - it would have been easier if I used that method from the start. One caveat - there is an option to inject Javascript into your pages for traffic measurement which is ON BY DEFAULT, you have to go to "Web Analytics" and turn this off if you don't want it! * https://cmacleod.me.uk https://cmacleod.me.uk & https://newsgrouper.org https://newsgrouper.org
TIPSIO 1mo ago
My wife and I have a mobile group/shared bot system where we can make mini apps and collab. Anything from baby stuff, groceries, shopping, planning, wine tracker app, simple/fun/useful data things, etc… We have Tailscale on our phones and can instantly and privately see without deployment or anything crazy via our secure VPN. Think shared Claude Artifacts that don’t live @ Anthropic. Tried to first do this with Cloudflare Tunnels (because I love Cloudflare), but between the broken dashboard side of Zero Trust and nightmare of Warp… it was basically impossible to setup. I guess that’s all super enterprise, which seems to be very anti-Cloudflare philosophically to not be able to self do things. Will check out Quick Tunnels but I think it’s missing the bigger integration offerings Tailscale has/does still.
- noir_lord 1mo ago
  Only reason I have it (cloud flare tunnels) setup for personal use is because I had to do it for work years ago and yeah, Enterprise(tm) is a good description, haven't touched it in years so when it breaks I'll likely use something else. Getting it to do what I wanted with a traefik front router with cloudflared talking to arbitrary subdomain that is spun up and broadcast from the other project side was very painful in a "this could be more friendly" way. It has been truly bulletproof though since then so that's almost enough to make me go reread all the docs.
- nemosaltat 1mo ago
  Us too, consider using your bots to migrate your tailnet to headscale. Daily driving Headscale + Headplane + Tailscale’s graciously provided/compatible native apps makes me feel like my devices are truly under my control.
  - DaSHacka 1mo ago
    If only headscale supported tailnet lock and multiple control servers. They consider both features "enterprise" even though the former is arguably a bare minimum and the latter nice even for home users in the event their lab gets taken offline.
- _blk 1mo ago
dbmikus 1mo ago
Now that is one vibe-coded website
afisxisto 1mo ago
I quite like pinggy for this. You don't need to install anything, since it uses a plain SSH tunnel. ssh -p 443 -R0:localhost:9051 free.pinggy.io (Free for 1h each session)
- ghoshbishakh 1mo ago
  Thanks for sharing. - Co-founder of Pinggy.
- mitxela 1mo ago
  You can also do this on any server you have: ssh -R 0.0.0.0:80:localhost:9051 myserver Make sure server sshd config has: GatewayPorts yes
scosman 1mo ago
The number of vibe coded apps accidentally hosted on dev laptops is about to explode.
corvad 1mo ago
This is not anything new they have been around since the tunnels project launched. What is more concerning is the AI slop webpage and just the "AI" centered relaunch of an existing product.
smetannik 1mo ago
So is this basically a ngrok from CF?
adamfeldman 1mo ago
Cloudflare doesn't really seem to care about their tunnel product. "cloudflared service install broken on macOS" since 2021: https://github.com/cloudflare/cloudflared/issues/327 https://github.com/cloudflare/cloudflared/issues/327
- keeganpoppen 1mo ago
  yeah am i crazy or could it not like already do this as well? i swear i’ve seen somesuch similar in the cloudflared options. maybe not. but i can second having had some problems over the year getting cloudflared to install/set up correctly. tbf the actual feature works amazing once you get it working.
  - robertlagrant 1mo ago
    As I understand it you can make a tunnel, but it's under a domain you control and it's a few clicks in the dashboard to set up, and then a something to run in CLI. That's what my homelab uses. This is just a single CLI command and the whole thing is set up.
- st3fan 1mo ago
  Huh I brew installed it and got a working tunnel in like 15 seconds.
  - lysace 1mo ago
    Install via brew worked. Getting the hostname to resolve took 30 mins of waiting. Have they heard of wildcard DNS?
    - judge2020 1mo ago
      Cloudflare isn't going to wildcard every domain on their platform just to cure stale cache DNS issues.
      - lysace 1mo ago
rock_artist 1mo ago
What's surprised me, just earlier today I let Codex write a minor PR for simple open-source webapp. I needed HTTPS for testing secured context Web API. (Web Bluetooth) While testing it locally Codex by itself suggests using CF Tunnels but what's more interesting it actually used the Quick Tunnels. Coming from days where I get warnings of vibe-coded generated code using deprecated code or older APIs, I must say using something so fresh is quite impressive.
- awwaiid 1mo ago
  As far as I know this has been a provided feature of cloudflare for several years. I don't understand why it was posted today.
everybodyknows 1mo ago
The page is a fine exemplar of marketing deception. Banner says: > Free, secure tunnel for everything you are building. > Preview and ship ideas globally in seconds with Quick Tunnels. Deploy your local application to the Internet with a single command. Clicking through Explore Cloudflare Tunnel leads us to: > Looking to expose public applications? This documentation covers Cloudflare Tunnel use cases for private networking and Zero Trust, like VPN replacement and private network access. For publishing public web applications, APIs, and services to the Internet through Cloudflare refer to ...
rinconrex 1mo ago
Oh I use this for testing and demos between my phone and computer. Ngrok is fine, probably better off using Tailscale, but it's very easy to just run a quick tunnel with "cloudflared tunnel --url localhost:XXXX".
spprashant 1mo ago
Off-topic: That web page looks exactly like my vibe-coded utilities.
deleted 1mo ago
[deleted]
superkuh 1mo ago
Cloudflare's only goal here is to put themselves between everyone and charge a toll. They are running a protection racket where they themselves are causing much of the damage they offer protection from. This is another example.
bilater 1mo ago
So this is basically ngrok?
bitlad 1mo ago
So it is ngrok 10 years later?
skhameneh 1mo ago
There's a number of comments already about how this page looks vibe coded, I'd add that I'm actually shocked at how much this looks like the output of a one-shot prompt. It's not so much that an LLM was used, but a callout on just how generic this page is. How much iteration went into this? At surface it looks like nearly no iteration. Edit: Well, they just re-vibed it. Went from the most generic Claude 4.6 era to today’s models, quality wise. I wish I had saved a copy of the original, because it would have taken me actual solid effort to make a page that generic out of an LLM.
- PufPufPuf 1mo ago
  Group of three cards, each with a left-aligned icon, heading and subheading stacked -- that's the m-dash of web design.
- vlyan 1mo ago
  I'll take that over corporate memphis of the previous decade. (idk if it's really declining or I simply haven't noticed it in a while)
- ruuda 1mo ago
  "Traffic rides Cloudflare's network" Oh, hello Claude.
  - hackernud3s 1mo ago
    How would you say that? I can't think of a clearer way to say it TBH.
    - jofzar 1mo ago
      "Traffic routes via Cloudflare's network"?
      - hackernud3s 1mo ago
        It routes from closest PoP to visitor -> closest PoP to origin. Your way doesn't convey that as clearly IMHO.
infogulch 1mo ago
I made my own tunnel system with a $5/mo vps that runs kernel wireguard and accepts my nas' public key. Once connected it DNATs 80/443 traffic down the tunnel to the nas, where its routed to caddy. The vps runs a custom image that is 2.54 Megabytes. It has a custom kernel with almost everything but networking and wireguard disabled, a fixed-size fs with pre-allocated blocks and inodes to hold the vps wireguard key, and a single pid 1 binary that calls the kernel directly to set up the routing rules, generate a new wireguard key on first boot and save it to the fs, print out the wireguard public key to the console, and loops reap. Updating involves building and uploading a new image, assigning the vps to use it, reboot, wait for the public key in the console then set it on the nas so they can talk.
- RedCinnabar 1mo ago
  Very cool, do you use some kind of an atomic distro like nix or something entirely self built using Yocto/Buildroot? I do something similar with a simple SSH tunnel and a NFT rule. Though, I don’t need your kind of ephemeral setup and so I just use Debian.
  - infogulch 1mo ago
    Thanks! The build system is nix, but the result is more of an appliance than a distro. (linuxManualConfig from tinyconfig + fragment, static musl Rust PID 1, mke2fs -d) Updates are rebuild-redeploy with the provider API; it can't update itself. The filesystem is a fixed-size image (even omitting resize2fs, so no growing onto the VPS disk), and it remounts read-only after boot. The boot log is 270 kernel lines then 4 userspace: 1 nftables loaded, 2 printing the gate's wg0 public key, 1 remounting ro.
- cyberamirul 1mo ago
  Self hosting might win on control, but it’s harder to manage so I went managed (CF Tunnel). Edge terminates TLS, my Caddy only speaks HTTP, nothing to cert renew (unless you cerbot, but that’s not a guarantee if Let’s encrypt is down).
general_reveal 1mo ago
Could we turn this into p2p cloud hosting for all?
- mitxela 1mo ago
  No, by definition it's not P2P because it's all going through Cloudflare.
maipen 1mo ago
I'm sorry to be offtopic, but this website looks like an hallucination generated by chatgpt 4. This type of quality downgrade is scary, and it's everywhere now.
rkovashikawa 1mo ago
cloudflare rocks
mgw 1mo ago
Can anyone elaborate on what's new? This exact product has existed from Cloudflare for years. Is it just that they added a new marketing site for it?
- 6thbit 1mo ago
  "quick" tunnels you can make by installing cloudflare software and running a command, without a cloudflare account, using a fixed "trycloudflare.com" domain and not your own domain. existing (slow) tunnels you can create once you've set up your own domain for cloudflare to manage its DNS, installing cloudflare software, logging in to your account, and running a similar command. edit: my bad, quick ones aren't new at all
  - misnome 1mo ago
    This has been the behaviour when you launch but don’t connect a specific tunnel for at least a couple of years
  - mmoustafa 1mo ago
    Quick tunnels have existed since at least 2022 (when I was using them)
- mmoustafa 1mo ago
  Nothing is new, quick tunnels were launched in 2021 https://blog.cloudflare.com/quick-tunnels-anytime-anywhere/ https://blog.cloudflare.com/quick-tunnels-anytime-anywhere/
rcarmo 1mo ago
I want this with TOTP or passkeys. Just giving me a hostname doesn't cut it these days.
partloyaldemon 1mo ago
Tailscale is one of the most profoundly useful technologies I’ve ever used as small business person. It’s also one I would have never thought to invent despite feeling its lack daily.
sparc24 1mo ago
Worst marketing ever. ngrok had a similar slogan: something like - "We help you put localhost on the Internet." What could possibly go wrong?
- m00x 1mo ago
  How many ways can you convey doing the same thing? All the banks out there have almost identical slogans because they do very similar things.
- hashstring 1mo ago
  Hm, yeah, depends who you’re marketing this to. Also, the “0 ports opened” marketing is misleading. It still binds to a port and then also lets people access your resources over it. I dislike that Cloudflare Engineering has become more… marketingy as of late. Also with their Cloudflare OS misnomer. Their products used to make more sense, what happened?
  - mitxela 1mo ago
    Marketing is meant to be misleading. That's how it works.
    - hashstring 1mo ago
      No, marketing is about communicating valuable offers. Misleading communication is what I am describing, that is a subset of all communications.
ghoshbishakh 1mo ago
This is a very good solution for HTTP(S) tunneling - which is the most frequently needed tunnel. However if you want to play a game, or use SSH, then Pinggy tunnels are very simple to use. One command: ssh -p 443 -R0:localhost:443 tcp@free.pinggy.io Disclosure: Co-founder of pinggy.io here. Edit: I meant TCP tunnels, UDP tunnels, or also TLS tunnels for end-to-end encryption.
- tonymet 1mo ago
  i love this! never understood why a proxy app was needed
  - fragmede 1mo ago
    So you don't know my IP (DDoS target), and because of NAT.
    - tonymet 1mo ago
      any app will connect with an IP am I missing something . a socket is exactly (IP, port) (src, target) tuple
      - c0wb0yc0d3r 1mo ago
        For me, it’s as much about ease of use as much as it is about minimizing attack surface area. Also the lifetime I need the connection open. For something quick, ssh tunnel. For something normies use, reverse proxy. Ain’t trying to teach my parents about IP addresses and port numbers.
        tonymet 1mo ago
        tredre3 explained it above
    - tredre3 1mo ago
      I think tonymet meant he didn't understand why cloudflare didn't allow using ssh -R instead of cloudflared to create the tunnel, not not using a tunnel at all.
yuchi 1mo ago
I still remember when ngrok came out. The experience was more or less the same. It’s interesting that 10 (more?) years later the product has not evolved and, apparently, hasn’t found a way to finance itself without removing the pure free tunneling option.
vansh_sethi_vs 1mo ago
[dead]
_user_account 1mo ago
The main use case: cloud harnesses to access your local network; I highly recommend to run the harness in your local network instead, then you own the session, no tunnel needed. The other use case for webhooks is ok, but is exactly what ngrok already does since forever with a pretty high free quota.
- deleted 1mo ago
  [deleted]
nickgray 1mo ago
This is cool. I like it! Also Cloudflare design has stepped up so much over the past 2 years.
emadabdulrahim 1mo ago
Does this make working with agents in cloud more interesting? Maybe now I can see my changes right away without waiting for the build and deploy? By running the dev server and tunneling from the sandbox giving me a direct url access somehow? Can someone chime in here?
blocke 1mo ago
Ah yes. We can't let self hosted app traffic flow across the Internet in a way that escapes the vast Internet surveillance system run by the Americans called Cloudflare. Hmm, Tailscale is too convenient and that traffic is going dark from Cloudflare's all seeing eye.
pocksuppet 1mo ago
This is obviously vibe written, and I can't wait to see how quickly it will be shut down after someone uses it in combination with Mullvad to host child pornography. Mullvad themselves already turned off port forwarding because people were using it to host child pornography. This is like Mullvad's port forwarding, but free.
- throawayonthe 1mo ago
  they've been running the tunnels service for years and they also provide web hosting..
  - kalcode 1mo ago
    It's the AI witch-hunt these days. Salam trails coming soon to you're nearest artist! "That's AI!!!" Sigh... HN littered with it these days.
inconshreveable 1mo ago
hi y'all, ngrok creator/founder here. we removed anonymous usage of our product many years ago because it was far and away the largest source of abuse on our entire platform. i believe at this point that that anonymous, account-less tunneling services like this are net negative for the security of the internet happy to answer any questions from the community
- jeremyjh 1mo ago
  Would you ever ship a product where all the ad copy was written by an AI and read by no one?
- Gigachad 1mo ago
  The marketing from Cloudflare around this being for agents feels like the intended use case is for agents to exfiltrate data off your laptop without pesky hurdles like asking the user to set up an account first.
- opengrass 1mo ago
  It's not a security issue, it's a liability issue!
- mitxela 1mo ago
  I'd expect an anonymous inbound tunnel to be better than an anonymous outbound proxy and we have plenty of the latter.
tobih 1mo ago
json output is nice, my agents always had to parse the text output before
opengrass 1mo ago
This is my docker compose for sharing files with randoms online https://pastebin.com/raw/cYV7ksw9 https://pastebin.com/raw/cYV7ksw9 Don't pass -d, your tunnel URL prints in the console and you can download dirs as tarball.
saejox 1mo ago
Needs to support tcp and udp
dzonga 1mo ago
I have been considering using my other laptop as a place to run my agents in production since 1. my laptop is more powerful than the vps I can rent for cheap. then just use Cloudflare tunnels to connect to the laptop.
cryptolobster 1mo ago
For small-scale personal or family applications serving just a few users, does it make sense to choose Quick Tunnels over Tailscale or Pangolin?
jdthedisciple 1mo ago
Interesting but what a horribly vibe coded website that barely works on mobile
- Gigachad 1mo ago
  It's broken on desktop too...
girvo 1mo ago
This is super neat! I rely on normal Cloudflare Tunnels for my self-hosted website/web apps, works shockingly well all things considered. It was pretty easy to setup… but I cheated, and use Dokploy which handled most of it AFAICT
JeremyJaydan 1mo ago
I used Cloudflared tunnels for a while in production, they worked very well but the config was a bit of a pain sometimes. It's nice to see a simpler version even if it's just for testing.
narmiouh 1mo ago
I'm not sure how safe this is... vibe coded app with may be no security and now available from the internet for anyone to RCE into my laptop?
dools 1mo ago
I’ve been using cloudflare tunnels quite a bit in places where I would have traditionally gone for a reverse port forward and they’re working really well. The quick tunnel concept seems really great but the non-quick tunnels are also very useful and can be entirely automated.
noname120 1mo ago
Cloudflare Quick Tunnels have existed for more than 5 years (yes, including the anonymous quick tunnels). I copy-pasted the url of the HN link in archive.org, see for yourself: https://web.archive.org/web/20211202005430/http://try.cloudflare.com/ https://web.archive.org/web/20211202005430/http://try.cloudf... Is a new vibe-coded landing page for a 5-year old product really worthy of being on the front page nowadays? There should at least be a [2021] in the title.
- malfist 1mo ago
  I did not know about them and I have a good use for them today. So I found it useful though I agree it needs the date disclaimer
  - ckvibubueu 1mo ago
    Web page can't even render on mobile properly
- nijave 1mo ago
  Didn't these used to be called Argo Tunnels a long time ago? I think Argo Tunnels got repositioned for connecting to origin servers without needing an incoming connection to the origin but I thought they originally did something like this/ngrok Yeah, I just checked the page >can connect their server to the Internet with Argo Tunnel for free
  - wbl 1mo ago
    There was a problem with the name: toxic mine trailings weren't what was wanted. https://en.wikipedia.org/wiki/Argo_Tunnel https://en.wikipedia.org/wiki/Argo_Tunnel
- jofzar 1mo ago
  5 years ago imo it was less relevant, if you showed me this then I would be like "cool tech, but other then a specific scenario, why would I care"
ouch-blurred52 1mo ago
[flagged]
greyhound1 1mo ago
i find it hard to read any text when the site has many animations that can't be stopped
nojvek 1mo ago
I so hate codex speak.
nyxtom 1mo ago
I've used these tunnels all the time when I wasn't at my computer. Insanely helpful when doing agentic work on the go
mintflow 1mo ago
perhaps this is the most easy to use networking product that ever shipped, but given ngrok did this many years before, maybe they just think for the agentic era? though one must take care for the authentification I also think it seems cloudflare enter into a stage keep adding products and make the portal looks like a maze to get more advanced features configured Do you still remember cloudflare mesh and use and stick to it?
reddec 1mo ago
I have been developing for my own use something like that but self hosted. There are other solutions, but this one simple, reliable and secure in a way I see it. Originally didn't want to share but here it is https://github.com/reddec/tunnel-me https://github.com/reddec/tunnel-me UI: fully LLM assisted (not vibe coded, but guided with a lot of iterations). Backend: hand written, but before release polished via LLM. Docs: me - input, LLM - output. The things I am proud: - it very reliable - its single binary with reasonable defaults and low memory usage - SSO out of the box (cause I am using pocketid in my homelab) - very simple backend
Nevin1901 1mo ago
Cloudflare tunnels are really useful when dealing with webhooks. Way better than Ngrok and you can set it up on a custom subdomain you own. eg: site.yourdomain.com
- zahidrasool 1mo ago
  [flagged]
geroge_kyaw 1mo ago
Lol Codex UI!!!
shmde 1mo ago
I have used this extensively previously when I had to quickly share a UI prototype with my Product manager. There used to be all sorts of cors error when I also had a backend. Then I realised its just better to make a branch and deploy it in amplify and add the cors origin in the backend. But its good for quick UI sharing
cliftonc 1mo ago
I use this a lot, but find it a bit hard to manage if you want a persistent tunnel locally to use for dev (e.g. webhooks etc), so I added a wrapper around it that you can easily use: https://github.com/cliftonc/cfld https://github.com/cliftonc/cfld
itvision 1mo ago
The RAM pricing crisis is doing wonders to the software industry. Amazing.
cbsmith 1mo ago
What could possibly go wrong? ;-)
shiftnotes 1mo ago
[flagged]
apolloswave 1mo ago
[flagged]
peter_retief 1mo ago
I have been using CF tunnels for quite some time, very useful if you want to ingest mail on a local server without a public IP and hosting anything locally. They are providing this for free up to a point, I wonder if all developers are aware of this amazing offering?
adamch 1mo ago
Lovely to see Cloudflare Tunnel frontpage on HN. Working on Tunnel was the highlight of my career. It was a fun product with a lot of bugs to fix, features to add, architecture to design. We were all working in-person, solving incidents together, getting lunch together every day. Taught me so many important skills that have helped me in every other project I've ever worked on.
abalashov 1mo ago
Ah, an ngrok competitor. It's what we elderly (~40 myself), yelling-at-clouds types call "reverse SSH tunnels", but this is an anachronism from the era of knowing how to do things rather than paying for managed SaaS products to do them. Don't mind me, just yelling at clouds...
appleappleapple 1mo ago
Lol this landing page looks almost exactly like something my company just put out. Holy AI
AlisaYoki 1mo ago
[dead]

833 points by jcbhmr 1mo ago

rvz 1mo ago

Seems like the quality of software engineering is now going to zero and just vibe coding unstable alternatives since 2023.

smalltorch 1mo ago

It's a nice ability, but I dont like the terms of use.

ZeroCool2u 1mo ago
Anything specific to watch out for?
whizzter 1mo ago
On what url were those? Or Cloudflare's TOS in general ?

user3939382 1mo ago

I just spent a week writing a harness around the existing tunnels to make this by hand.

dangoodmanUT 1mo ago

Historically, we’ve found that their tunnels have really high latency variance. For example something that’s normally 30-50ms to ec2 is now 115ms-750ms

hackernud3s 1mo ago
Because it travels along their edge. It's apples and oranges to your AWS tunnel.
- dangoodmanUT 1mo ago
  No, they claim their edge is better for residential connections to your backend. We tried multiple SF to us-east-1 and it was always substantially worse

ThrowawayTestr 1mo ago

No-ip gives out free dynamic DNS with a static URL. I use it for Sunshine desktop streaming when I travel.

cuu508 1mo ago
Yeah, but then you are always exposing your public IP.
- monster_truck 1mo ago
  Exposing it to what exactly? The internet? Yes that's how it works
  - johng 1mo ago
    This requires no port forwarding, so someone brute force scanning your IP won't find this and your open port. they also might have a harder time figuring out what service has been exposed since the port number itself will be unknown.
  - cuu508 1mo ago
    If somebody learns that such-and-such DynDNS URL is mine, they can always do a DNS lookup to find my current IP address. They can: - find my approximate physical location - regularly scan ports on my IP and wait for me to accidentally expose a service I didn't mean to - track me in any access logs they have access to
    - mitxela 1mo ago
      They can, and do, do this with or without DynDNS.
      - cuu508 1mo ago
        Do you mean by getting the information from Cloudflare, or some other way? With DynDNS though, finding out my IP is trivial and does not require any special powers or skills, it is just a DNS lookup. PS. Just re-watched your matrix LED pendant video. It is so well done, both the project, and the accompanying video!

altmanaltman 1mo ago

[flagged]

kincl 1mo ago

Is this their version of https://tailscale.com/tailcat https://tailscale.com/tailcat ? I can't tell if you need to auth edit: yeah, it says no account creation, neat!

hermanradtke 1mo ago
feels more like an ngrok competitor
- israrkhan 1mo ago
  This is a crowded space with lots of solutions (oss and commercial) https://github.com/anderspitman/awesome-tunneling https://github.com/anderspitman/awesome-tunneling
alasano 1mo ago
More like their version of Tailscale funnel I think
Tepix 1mo ago
I believe with tailscale you don’t have to trust a 3rd party with your cleartext traffic
- athrowaway3z 1mo ago
  But you do seem to get to host a https version of your app in case you need features locked behind secure context.
- spwa4 1mo ago
  That can't be right. If they're hosting on a different DNS they have an absolute need to MITM ssl/tls traffic. Can't work otherwise. So cloudflare sees your plaintext. Btw: tailscale does not (but ssl errors and warnings are unavoidable)

ZeroCool2u 1mo ago

This is handy, but I wonder how much it will cannibalize their services. I have a simple app deployed on cloudflare for a very niche single purpose use, but I wouldn't have bothered if I had this. Serving it from my own machine would have been fine.

aniviacat 1mo ago
Cloudflare Tunnels has been a free service of Cloudflare for quite a while now. What's new is being able to use them without needing an account.
- bakugo 1mo ago
  It's not new. Maybe this page is new, but being able to set up a quick tunnel on trycloudflare.com without an account has been a thing for years.
roncesvalles 1mo ago
Not many people run their local machine 24/7.
- berofeev 1mo ago
  What does reality look like on this nowadays? My initial thought was desktops generally run 24/7, with laptops running when in use. At least for the customer at the market intersection for this type of product.
  - JavierFlores09 1mo ago
    I often tell my dev colleagues to avoid having their PC turned on all the time, be it because of the electricity bill cost, environmental impact or simply to make the longevity of the hardware a little longer. Granted almost everyone just ignores those things even if they're conscious of it, so I'd say you're right
    - 1mo ago

aliasxneo 1mo ago

Tunneling was something that recently fell out of the work I've been doing [1]. I've used Cloudflare Tunnels before but I just have low trust with them recently with how big they are getting. All of these nice things come at the cost of pushing _a lot_ of traffic through their systems. [1]: https://dntls.substack.com/p/the-new-internet https://dntls.substack.com/p/the-new-internet

afzalive 1mo ago
This is pretty great and I think this will be quite important in the age where everyone has their self-hosted services.
simonw 1mo ago
If there's any company in the world that can survive a lot of extra traffic being pushed through their systems it's Cloudflare. I bet these new tunnels end up being a fraction of a percentage point of their network traffic.
- aliasxneo 1mo ago
  Yeah, I don't doubt their infrastructure at all. In fact, I rate them fairly high in terms of reliability and performance. I've honestly been a fan of them for a very long time - it's just I'm watching all of this centralization happen and it sets my Spidey sense off. Like I'm waiting for the other shoe to drop.
  - simonw 1mo ago
    Gotcha, that totally makes sense.
  - swozey 1mo ago
    The "centralization" which is cloudflare basically running its own walled garden version of the interent (how often do you see a cloudflare page checking if you're human?) is exactly why a lot of people do NOT like cloudflare. And if you've known about CF and its leadership since their inception you'd be even more wary of sticking your stuff over there. I've migrated many companies off of cloudflare, usually because they end up pissing off companies when a contract renewal comes up and they slam them with massively increased bills and almost useless support if you aren't very high paying enterprise. I don't know how many CF support tickets I've just given up on over the last 15 years, usually related to their admin page, workers or some weird thing their system does that wasn't documented and I just stop getting responses and definitely don't get fixes. If you ever worked in webhosting the Cloudflare wordpress/etc extensions are everywhere and back when I did work in hosting tons of support tickets were made because of CF. Could be way better now, I don't go near that industry these days. The casual CF user sticking it in front of a blog they rarely look at and the business forced CF user has a very different experience. I cringe and seriously consider if I'm interviewing for an infra role and they use cloudflare. Usually it's startups that grew into larger businesses.

whizzter 1mo ago

Don't all these free proxy services always fall prey to blacklists because scammers,etc abuse them until they're useless?

Imustaskforhelp 1mo ago
Yes they actually do, but because its cloudflare which is offering this, blacklisting it might lead to blacklisting can be more negative and cloudflare has a much higher incentive to not make these tunnels useless. They are also more powerful and can fix things which would be harder for smaller companies to handle (atleast within the context of cloudflare tunnels)
- mitxela 1mo ago
  Spain blacklisted Cloudflare and everyone hates it, but it proves it can happen.
axus 1mo ago
Wow, exfiltrating data has never been easier!
srichard16 1mo ago
Can confirm. Coming from ngrok, the main reason we had to make tunneling not anonymized etc was because of scammers, etc on the internet. Other players in the space bypass this by open sourcing the tech, or separating the architecture entirely. This is cool and all, but ultimately gives nefarious actors on the internet more opportunities.
- noname120 1mo ago
  How does “open sourcing the tech” “give nefarious actors on the internet more opportunities”? Sounds like a paltry excuse for not open sourcing your tech.
uxjw 1mo ago
Probably why they used the trycloudflare.com domain as they expect it to be blocked.

JV00 1mo ago

Does this have a more generous allowance than ngrok? From what I can read no limits are mentioned

daemonologist 1mo ago
I don't know if there's an overall limit, but their regular tunnels have a limit of 100 MB per request which breaks stuff like Immich.
raahelb 1mo ago
These are the limitations mentioned on the docs [1]. Quick Tunnels are subject to a hard limit on the number of concurrent requests that can be proxied at any point in time. Currently, this limit is 200 in-flight requests. If a Quick Tunnel hits this limit, the HTTP response will return a 429 status code. Quick Tunnels do not support Server-Sent Events (SSE). [1]: https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-tunnel/do-more-with-tunnels/trycloudflare/#limitations https://developers.cloudflare.com/cloudflare-one/networks/co...

Narciss 1mo ago

My AI discovered this days ago when I wanted to deploy a new vibe coded website (it was to keep score while playing whist and rentz) Thought it was very cool

smalltorch 1mo ago

If your a hobbiest or dev just testing your services, it makes more sense to utilize onion services imho. It does the exact same thing, except supported by a global network of volunteers around the world. Sure, you get some latency, but this is actually ideal for testing. You should know how your service operates in non optimal lightning fast conditions.

thenewnewguy 1mo ago
I honestly can't tell if you're trolling or this is an HN out of touch moment. The obvious difference (and thus massive advantage) of the cloudfare product is that it is accessible over the normal internet without needing to install a tor client. I'm sure that works for some subset of the population where all potential users are already comfortable using Tor; but imagine trying to share your PoC website with the designer/client and you are asking them to install Tor browser.
- smalltorch 1mo ago
  >hobbiest or dev just testing your services Is different than sharing your work with a client. I personally wouldnt make it SOP to utilize a complely free service like this to share my work. I'm not saying it's not convient, it definitely is. But you shouldn't subject a clients product to terms they probably aren't aware of.

himata4113 1mo ago

This has existed for a long time and has been abused by quite a few people. I've seen some cc nodes using a random known cloudflare site and spoofing hostname to a temporary cloudflare site. IMO this should require a login at bare minimum.

booi 1mo ago
if you think people won't abuse it because you're making them log in with a free email address...
- himata4113 1mo ago
  This requires zero effort and you can deploy hundreds to thousands while maintaining 1000 gmail, proton etc takes resources and money.
  - booi 1mo ago
    They already do this. the email accounts already exist
    - himata4113 1mo ago
      It's the same reason that exists for PoW captcha, it's just way more annoying. Also accounts offer traceability versus a new identity every time you want to do something unless you want to go through hundreds of accounts a day.

cute_boi 1mo ago

what a sloppy website, did cloudflare fired bunch of ui/ux designer? Every text is slop lol.

usewik 1mo ago
yep, and all those fired and remaining are busy ai-native proofing their careers and tokenmaxxing everything including copy
cub-creature 1mo ago
I swear if I see one more "pill-badge callout -> header -> subtitle" with gradient background and hover-cards landing page I'm going to crash out
- deleted 1mo ago
  [deleted]

xeornet 1mo ago

Looks like they straight up vibe coded the landing page lol.

rozab 1mo ago
I find it quite shocking that orgs with some great designers like cloudflare are doing this. Broken layouts, trios of random uppercase words sprinkled around. It's crazy. How does it inspire confidence in a product, knowing that the landing page was created in 10 seconds?
- maipen 1mo ago
  AI took all the effort, so I guess nobody sees value in these little pages anymore. Not even those being paid. It's actually scary.

075326899532 1mo ago

[ad]

tombert 1mo ago

I like Cloudflare Tunnels a lot, but something that annoys me is that officially you're not allowed to use them for streaming video, meaning I can't put it in front of my Jellyfin without breaking TOS. I think that rule is more of a "we reserve the right to..." rule, but it makes me sad because I'd rather not open up ports on my router to expose my Jellyfin to my parents.

TonyStr 1mo ago
I discovered and set this up the other day, added jellyfin, immich and forgejo and was really happy about the result for five minutes, before I discovered that limitation in the TOS. Now I only use it for forgejo. Have you found a different solution to exposing jellyfin?
- tombert 1mo ago
  I have a proxy set up with the Oracle Always Free VMs they provide. It works well enough.
- madeforhnyo 1mo ago
  For free idk, I personally use a VPS (with unlimited traffic) and Tailscale. Someone has to pay for the public IP and proxy.
- guluarte 1mo ago
  i just use wireguard or tailscale, provision a subdomain with a custom ssl and resolve to a nat ip.
tamimio 1mo ago
Use pangolin (you can self host), been using it for a while and it’s great, under the hood it’s a vpn+reverse proxy which you can do yourself too. In pangolin you can have public or private resources, where private ones you need to authenticate through pangolin first (either pass or others like pin number for your parents so easy to remember). When you link your domain for public ones, I suggest you make a sub domain for it, so your apps will be a sub to your subdomain, that way you keep control of your main domain while having automatic assignment for your apps rather than manually, and if you didn’t issue a certificate, that sub.subdomain is basically invisible on the internet unless you host a service to expose it.

rplnt 1mo ago

Are we in an age where no one even bothers to open the product pages they generate? The first subtitle with the font color almost matching the background. Or it's even worse that a human looked at it and said "yep, that's OK"?

reaperducer 1mo ago
Are we in an age where no one even bothers to open the product pages they generate? We live in an age of monkey-see-monkey-do management. When Microsoft axed its QA team, it gave permission for everyone else to make the same stupid mistake.
- rvz 1mo ago
  We are in the age of where hype beats reasoning.
  - pocksuppet 1mo ago
    Since before 2016 actually
lkbm 1mo ago
It's fine on light mode. It's just the dark mode that's terrible. Seems likely they only tested the former.
- rplnt 1mo ago
  I see, good point. Some might be confused about my comment then.
- brazukadev 1mo ago
  which proves the point OP is making.
- Gigachad 1mo ago
  I'm viewing the site on lightmode, clicked one of the #links which scrolled down the page, when I scrolled back up all the sections lost their content and were unusable. I've never seen someone fail a static page like this. And from a huge company like Cloudflare too..

israrkhan 1mo ago

For someone looking for an opensource solutions, following is an awesome resource for tunnelling https://github.com/anderspitman/awesome-tunneling https://github.com/anderspitman/awesome-tunneling I have played around with frp, bore and ngrok.

drdexebtjl 1mo ago
frp is nice. I have the tiniest Amazon Lightsail instance running a tunnel to a Minecraft server in my basement. It’s cheaper than getting a fixed IP from my ISP, at sufficiently low traffic.

damsta 1mo ago

The website looks broken in dark mode on Firefox.

ggg011012 1mo ago

Quick Tunnels look great for demos and temporary dev environments. I’d still be hesitant to make them part of a long-lived production setup.

pstoll 1mo ago
You should be more than hesitant - don’t do it. They literally market them for quick demos. And not long lived production.
rinconrex 1mo ago
I use for the exact same thing. Running "cloudflared tunnel" sets up a temp solution. No log in needed, pretty convenient.

kelvinjps10 1mo ago

What's the difference between this and their previous Cloudflare Tunnels solution?

raahelb 1mo ago
From their docs [0]: > Free tunnels are meant to be used for testing and development, not for deploying a production website. [0: https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-tunnel/do-more-with-tunnels/trycloudflare/#why-does-cloudflare-provide-this-service-for-free https://developers.cloudflare.com/cloudflare-one/networks/co...
awwaiid 1mo ago
As far as I can tell, the difference is that they made a new website? The cloudflared instant tunnels have been around for years, including json output as far as I know.
opengrass 1mo ago
This gives a random trycloudflare.com subdomain each run, the other requires a domain and tunnel key on your account.

singpolyma3 1mo ago

It looks like tunnels can do some non https stuff these days? But it's a bit unclear

AtNightWeCode 1mo ago

Cool but the obvious flaw with this is that CF leaks DNS-records. So bots will find these urls instantly. Not sure why they have not fixed that or if it is even possible to fix.

nullbyte 1mo ago

Love this, very cool. I used to use a service called ngrok for this, but it's nice that Cloudflare is offering one now.

usewik 1mo ago

how long until someone's agent sets up a tunnel for the world to see one's most sensitive, private and embarrassing information or insecure work-in-progress app? granted, for the brew install some massive permissions are needed, so hopefully for those running their agent's in a sandbox, you should be safe.. should be..

frankcostanza 1mo ago

So... Cloudflare built Ngrok?

_pdp_ 1mo ago

It will be nice if it had persistent URLs and and SDK for desktop applications. It could solve a lot of small issues for a project I am currently busy with.

yodon 1mo ago
That's handled by all the prior releases of cloudflare tunnels
srichard16 1mo ago
ngrok does this free, but with an account
cmacleod4 1mo ago
I've been running a couple of websites* on a home machine behind a Cloudflare tunnel for 2-3 years now. The only thing I had to pay for was the DNS registration. There are limits on the traffic you can serve on their free plan, but I'm nowhere near reaching those. I don't know what an SDK would add, you just set up a web server using whatever method suits you, then configure the cloudflared to connect to that. I did find that the online dashboard could not support all the options I wanted, so I switched to using the config file method - it would have been easier if I used that method from the start. One caveat - there is an option to inject Javascript into your pages for traffic measurement which is ON BY DEFAULT, you have to go to "Web Analytics" and turn this off if you don't want it! * https://cmacleod.me.uk https://cmacleod.me.uk & https://newsgrouper.org https://newsgrouper.org

TIPSIO 1mo ago

My wife and I have a mobile group/shared bot system where we can make mini apps and collab. Anything from baby stuff, groceries, shopping, planning, wine tracker app, simple/fun/useful data things, etc… We have Tailscale on our phones and can instantly and privately see without deployment or anything crazy via our secure VPN. Think shared Claude Artifacts that don’t live @ Anthropic. Tried to first do this with Cloudflare Tunnels (because I love Cloudflare), but between the broken dashboard side of Zero Trust and nightmare of Warp… it was basically impossible to setup. I guess that’s all super enterprise, which seems to be very anti-Cloudflare philosophically to not be able to self do things. Will check out Quick Tunnels but I think it’s missing the bigger integration offerings Tailscale has/does still.

noir_lord 1mo ago
Only reason I have it (cloud flare tunnels) setup for personal use is because I had to do it for work years ago and yeah, Enterprise(tm) is a good description, haven't touched it in years so when it breaks I'll likely use something else. Getting it to do what I wanted with a traefik front router with cloudflared talking to arbitrary subdomain that is spun up and broadcast from the other project side was very painful in a "this could be more friendly" way. It has been truly bulletproof though since then so that's almost enough to make me go reread all the docs.
nemosaltat 1mo ago
Us too, consider using your bots to migrate your tailnet to headscale. Daily driving Headscale + Headplane + Tailscale’s graciously provided/compatible native apps makes me feel like my devices are truly under my control.
- DaSHacka 1mo ago
  If only headscale supported tailnet lock and multiple control servers. They consider both features "enterprise" even though the former is arguably a bare minimum and the latter nice even for home users in the event their lab gets taken offline.
_blk 1mo ago

dbmikus 1mo ago

Now that is one vibe-coded website

afisxisto 1mo ago

I quite like pinggy for this. You don't need to install anything, since it uses a plain SSH tunnel. ssh -p 443 -R0:localhost:9051 free.pinggy.io (Free for 1h each session)

ghoshbishakh 1mo ago
Thanks for sharing. - Co-founder of Pinggy.
mitxela 1mo ago
You can also do this on any server you have: ssh -R 0.0.0.0:80:localhost:9051 myserver Make sure server sshd config has: GatewayPorts yes

scosman 1mo ago

The number of vibe coded apps accidentally hosted on dev laptops is about to explode.

corvad 1mo ago

This is not anything new they have been around since the tunnels project launched. What is more concerning is the AI slop webpage and just the "AI" centered relaunch of an existing product.

smetannik 1mo ago

So is this basically a ngrok from CF?

adamfeldman 1mo ago

Cloudflare doesn't really seem to care about their tunnel product. "cloudflared service install broken on macOS" since 2021: https://github.com/cloudflare/cloudflared/issues/327 https://github.com/cloudflare/cloudflared/issues/327

keeganpoppen 1mo ago
yeah am i crazy or could it not like already do this as well? i swear i’ve seen somesuch similar in the cloudflared options. maybe not. but i can second having had some problems over the year getting cloudflared to install/set up correctly. tbf the actual feature works amazing once you get it working.
- robertlagrant 1mo ago
  As I understand it you can make a tunnel, but it's under a domain you control and it's a few clicks in the dashboard to set up, and then a something to run in CLI. That's what my homelab uses. This is just a single CLI command and the whole thing is set up.
st3fan 1mo ago
Huh I brew installed it and got a working tunnel in like 15 seconds.
- lysace 1mo ago
  Install via brew worked. Getting the hostname to resolve took 30 mins of waiting. Have they heard of wildcard DNS?
  - judge2020 1mo ago
    Cloudflare isn't going to wildcard every domain on their platform just to cure stale cache DNS issues.
    - lysace 1mo ago

rock_artist 1mo ago

What's surprised me, just earlier today I let Codex write a minor PR for simple open-source webapp. I needed HTTPS for testing secured context Web API. (Web Bluetooth) While testing it locally Codex by itself suggests using CF Tunnels but what's more interesting it actually used the Quick Tunnels. Coming from days where I get warnings of vibe-coded generated code using deprecated code or older APIs, I must say using something so fresh is quite impressive.

awwaiid 1mo ago
As far as I know this has been a provided feature of cloudflare for several years. I don't understand why it was posted today.

everybodyknows 1mo ago

The page is a fine exemplar of marketing deception. Banner says: > Free, secure tunnel for everything you are building. > Preview and ship ideas globally in seconds with Quick Tunnels. Deploy your local application to the Internet with a single command. Clicking through Explore Cloudflare Tunnel leads us to: > Looking to expose public applications? This documentation covers Cloudflare Tunnel use cases for private networking and Zero Trust, like VPN replacement and private network access. For publishing public web applications, APIs, and services to the Internet through Cloudflare refer to ...

rinconrex 1mo ago

Oh I use this for testing and demos between my phone and computer. Ngrok is fine, probably better off using Tailscale, but it's very easy to just run a quick tunnel with "cloudflared tunnel --url localhost:XXXX".

spprashant 1mo ago

Off-topic: That web page looks exactly like my vibe-coded utilities.

deleted 1mo ago

[deleted]

superkuh 1mo ago

Cloudflare's only goal here is to put themselves between everyone and charge a toll. They are running a protection racket where they themselves are causing much of the damage they offer protection from. This is another example.

bilater 1mo ago

So this is basically ngrok?

bitlad 1mo ago

So it is ngrok 10 years later?

skhameneh 1mo ago

There's a number of comments already about how this page looks vibe coded, I'd add that I'm actually shocked at how much this looks like the output of a one-shot prompt. It's not so much that an LLM was used, but a callout on just how generic this page is. How much iteration went into this? At surface it looks like nearly no iteration. Edit: Well, they just re-vibed it. Went from the most generic Claude 4.6 era to today’s models, quality wise. I wish I had saved a copy of the original, because it would have taken me actual solid effort to make a page that generic out of an LLM.

PufPufPuf 1mo ago
Group of three cards, each with a left-aligned icon, heading and subheading stacked -- that's the m-dash of web design.
vlyan 1mo ago
I'll take that over corporate memphis of the previous decade. (idk if it's really declining or I simply haven't noticed it in a while)
ruuda 1mo ago
"Traffic rides Cloudflare's network" Oh, hello Claude.
- hackernud3s 1mo ago
  How would you say that? I can't think of a clearer way to say it TBH.
  - jofzar 1mo ago
    "Traffic routes via Cloudflare's network"?
    - hackernud3s 1mo ago
      It routes from closest PoP to visitor -> closest PoP to origin. Your way doesn't convey that as clearly IMHO.

infogulch 1mo ago

I made my own tunnel system with a $5/mo vps that runs kernel wireguard and accepts my nas' public key. Once connected it DNATs 80/443 traffic down the tunnel to the nas, where its routed to caddy. The vps runs a custom image that is 2.54 Megabytes. It has a custom kernel with almost everything but networking and wireguard disabled, a fixed-size fs with pre-allocated blocks and inodes to hold the vps wireguard key, and a single pid 1 binary that calls the kernel directly to set up the routing rules, generate a new wireguard key on first boot and save it to the fs, print out the wireguard public key to the console, and loops reap. Updating involves building and uploading a new image, assigning the vps to use it, reboot, wait for the public key in the console then set it on the nas so they can talk.

RedCinnabar 1mo ago
Very cool, do you use some kind of an atomic distro like nix or something entirely self built using Yocto/Buildroot? I do something similar with a simple SSH tunnel and a NFT rule. Though, I don’t need your kind of ephemeral setup and so I just use Debian.
- infogulch 1mo ago
  Thanks! The build system is nix, but the result is more of an appliance than a distro. (linuxManualConfig from tinyconfig + fragment, static musl Rust PID 1, mke2fs -d) Updates are rebuild-redeploy with the provider API; it can't update itself. The filesystem is a fixed-size image (even omitting resize2fs, so no growing onto the VPS disk), and it remounts read-only after boot. The boot log is 270 kernel lines then 4 userspace: 1 nftables loaded, 2 printing the gate's wg0 public key, 1 remounting ro.
cyberamirul 1mo ago
Self hosting might win on control, but it’s harder to manage so I went managed (CF Tunnel). Edge terminates TLS, my Caddy only speaks HTTP, nothing to cert renew (unless you cerbot, but that’s not a guarantee if Let’s encrypt is down).

general_reveal 1mo ago

Could we turn this into p2p cloud hosting for all?

mitxela 1mo ago
No, by definition it's not P2P because it's all going through Cloudflare.

maipen 1mo ago

I'm sorry to be offtopic, but this website looks like an hallucination generated by chatgpt 4. This type of quality downgrade is scary, and it's everywhere now.

rkovashikawa 1mo ago

cloudflare rocks

mgw 1mo ago

Can anyone elaborate on what's new? This exact product has existed from Cloudflare for years. Is it just that they added a new marketing site for it?

6thbit 1mo ago
"quick" tunnels you can make by installing cloudflare software and running a command, without a cloudflare account, using a fixed "trycloudflare.com" domain and not your own domain. existing (slow) tunnels you can create once you've set up your own domain for cloudflare to manage its DNS, installing cloudflare software, logging in to your account, and running a similar command. edit: my bad, quick ones aren't new at all
- misnome 1mo ago
  This has been the behaviour when you launch but don’t connect a specific tunnel for at least a couple of years
- mmoustafa 1mo ago
  Quick tunnels have existed since at least 2022 (when I was using them)
mmoustafa 1mo ago
Nothing is new, quick tunnels were launched in 2021 https://blog.cloudflare.com/quick-tunnels-anytime-anywhere/ https://blog.cloudflare.com/quick-tunnels-anytime-anywhere/

rcarmo 1mo ago

I want this with TOTP or passkeys. Just giving me a hostname doesn't cut it these days.

partloyaldemon 1mo ago

Tailscale is one of the most profoundly useful technologies I’ve ever used as small business person. It’s also one I would have never thought to invent despite feeling its lack daily.

sparc24 1mo ago

Worst marketing ever. ngrok had a similar slogan: something like - "We help you put localhost on the Internet." What could possibly go wrong?

m00x 1mo ago
How many ways can you convey doing the same thing? All the banks out there have almost identical slogans because they do very similar things.
hashstring 1mo ago
Hm, yeah, depends who you’re marketing this to. Also, the “0 ports opened” marketing is misleading. It still binds to a port and then also lets people access your resources over it. I dislike that Cloudflare Engineering has become more… marketingy as of late. Also with their Cloudflare OS misnomer. Their products used to make more sense, what happened?
- mitxela 1mo ago
  Marketing is meant to be misleading. That's how it works.
  - hashstring 1mo ago
    No, marketing is about communicating valuable offers. Misleading communication is what I am describing, that is a subset of all communications.

ghoshbishakh 1mo ago

This is a very good solution for HTTP(S) tunneling - which is the most frequently needed tunnel. However if you want to play a game, or use SSH, then Pinggy tunnels are very simple to use. One command: ssh -p 443 -R0:localhost:443 tcp@free.pinggy.io Disclosure: Co-founder of pinggy.io here. Edit: I meant TCP tunnels, UDP tunnels, or also TLS tunnels for end-to-end encryption.

tonymet 1mo ago
i love this! never understood why a proxy app was needed
- fragmede 1mo ago
  So you don't know my IP (DDoS target), and because of NAT.
  - tonymet 1mo ago
    any app will connect with an IP am I missing something . a socket is exactly (IP, port) (src, target) tuple
    - c0wb0yc0d3r 1mo ago
      For me, it’s as much about ease of use as much as it is about minimizing attack surface area. Also the lifetime I need the connection open. For something quick, ssh tunnel. For something normies use, reverse proxy. Ain’t trying to teach my parents about IP addresses and port numbers.
      - tonymet 1mo ago
        tredre3 explained it above
  - tredre3 1mo ago
    I think tonymet meant he didn't understand why cloudflare didn't allow using ssh -R instead of cloudflared to create the tunnel, not not using a tunnel at all.

yuchi 1mo ago

I still remember when ngrok came out. The experience was more or less the same. It’s interesting that 10 (more?) years later the product has not evolved and, apparently, hasn’t found a way to finance itself without removing the pure free tunneling option.

vansh_sethi_vs 1mo ago

[dead]

_user_account 1mo ago

The main use case: cloud harnesses to access your local network; I highly recommend to run the harness in your local network instead, then you own the session, no tunnel needed. The other use case for webhooks is ok, but is exactly what ngrok already does since forever with a pretty high free quota.

deleted 1mo ago
[deleted]

nickgray 1mo ago

This is cool. I like it! Also Cloudflare design has stepped up so much over the past 2 years.

emadabdulrahim 1mo ago

Does this make working with agents in cloud more interesting? Maybe now I can see my changes right away without waiting for the build and deploy? By running the dev server and tunneling from the sandbox giving me a direct url access somehow? Can someone chime in here?

blocke 1mo ago

Ah yes. We can't let self hosted app traffic flow across the Internet in a way that escapes the vast Internet surveillance system run by the Americans called Cloudflare. Hmm, Tailscale is too convenient and that traffic is going dark from Cloudflare's all seeing eye.

pocksuppet 1mo ago

This is obviously vibe written, and I can't wait to see how quickly it will be shut down after someone uses it in combination with Mullvad to host child pornography. Mullvad themselves already turned off port forwarding because people were using it to host child pornography. This is like Mullvad's port forwarding, but free.

throawayonthe 1mo ago
they've been running the tunnels service for years and they also provide web hosting..
- kalcode 1mo ago
  It's the AI witch-hunt these days. Salam trails coming soon to you're nearest artist! "That's AI!!!" Sigh... HN littered with it these days.

inconshreveable 1mo ago

hi y'all, ngrok creator/founder here. we removed anonymous usage of our product many years ago because it was far and away the largest source of abuse on our entire platform. i believe at this point that that anonymous, account-less tunneling services like this are net negative for the security of the internet happy to answer any questions from the community

jeremyjh 1mo ago
Would you ever ship a product where all the ad copy was written by an AI and read by no one?
Gigachad 1mo ago
The marketing from Cloudflare around this being for agents feels like the intended use case is for agents to exfiltrate data off your laptop without pesky hurdles like asking the user to set up an account first.
opengrass 1mo ago
It's not a security issue, it's a liability issue!
mitxela 1mo ago
I'd expect an anonymous inbound tunnel to be better than an anonymous outbound proxy and we have plenty of the latter.

tobih 1mo ago

json output is nice, my agents always had to parse the text output before

opengrass 1mo ago

This is my docker compose for sharing files with randoms online https://pastebin.com/raw/cYV7ksw9 https://pastebin.com/raw/cYV7ksw9 Don't pass -d, your tunnel URL prints in the console and you can download dirs as tarball.

saejox 1mo ago

Needs to support tcp and udp

dzonga 1mo ago

I have been considering using my other laptop as a place to run my agents in production since 1. my laptop is more powerful than the vps I can rent for cheap. then just use Cloudflare tunnels to connect to the laptop.

cryptolobster 1mo ago

For small-scale personal or family applications serving just a few users, does it make sense to choose Quick Tunnels over Tailscale or Pangolin?

jdthedisciple 1mo ago

Interesting but what a horribly vibe coded website that barely works on mobile

Gigachad 1mo ago
It's broken on desktop too...

girvo 1mo ago

This is super neat! I rely on normal Cloudflare Tunnels for my self-hosted website/web apps, works shockingly well all things considered. It was pretty easy to setup… but I cheated, and use Dokploy which handled most of it AFAICT

JeremyJaydan 1mo ago

I used Cloudflared tunnels for a while in production, they worked very well but the config was a bit of a pain sometimes. It's nice to see a simpler version even if it's just for testing.

narmiouh 1mo ago

I'm not sure how safe this is... vibe coded app with may be no security and now available from the internet for anyone to RCE into my laptop?

dools 1mo ago

I’ve been using cloudflare tunnels quite a bit in places where I would have traditionally gone for a reverse port forward and they’re working really well. The quick tunnel concept seems really great but the non-quick tunnels are also very useful and can be entirely automated.

noname120 1mo ago

Cloudflare Quick Tunnels have existed for more than 5 years (yes, including the anonymous quick tunnels). I copy-pasted the url of the HN link in archive.org, see for yourself: https://web.archive.org/web/20211202005430/http://try.cloudflare.com/ https://web.archive.org/web/20211202005430/http://try.cloudf... Is a new vibe-coded landing page for a 5-year old product really worthy of being on the front page nowadays? There should at least be a [2021] in the title.

malfist 1mo ago
I did not know about them and I have a good use for them today. So I found it useful though I agree it needs the date disclaimer
- ckvibubueu 1mo ago
  Web page can't even render on mobile properly
nijave 1mo ago
Didn't these used to be called Argo Tunnels a long time ago? I think Argo Tunnels got repositioned for connecting to origin servers without needing an incoming connection to the origin but I thought they originally did something like this/ngrok Yeah, I just checked the page >can connect their server to the Internet with Argo Tunnel for free
- wbl 1mo ago
  There was a problem with the name: toxic mine trailings weren't what was wanted. https://en.wikipedia.org/wiki/Argo_Tunnel https://en.wikipedia.org/wiki/Argo_Tunnel
jofzar 1mo ago
5 years ago imo it was less relevant, if you showed me this then I would be like "cool tech, but other then a specific scenario, why would I care"

ouch-blurred52 1mo ago

[flagged]

greyhound1 1mo ago

i find it hard to read any text when the site has many animations that can't be stopped

nojvek 1mo ago

I so hate codex speak.

nyxtom 1mo ago

I've used these tunnels all the time when I wasn't at my computer. Insanely helpful when doing agentic work on the go

mintflow 1mo ago

perhaps this is the most easy to use networking product that ever shipped, but given ngrok did this many years before, maybe they just think for the agentic era? though one must take care for the authentification I also think it seems cloudflare enter into a stage keep adding products and make the portal looks like a maze to get more advanced features configured Do you still remember cloudflare mesh and use and stick to it?

reddec 1mo ago

I have been developing for my own use something like that but self hosted. There are other solutions, but this one simple, reliable and secure in a way I see it. Originally didn't want to share but here it is https://github.com/reddec/tunnel-me https://github.com/reddec/tunnel-me UI: fully LLM assisted (not vibe coded, but guided with a lot of iterations). Backend: hand written, but before release polished via LLM. Docs: me - input, LLM - output. The things I am proud: - it very reliable - its single binary with reasonable defaults and low memory usage - SSO out of the box (cause I am using pocketid in my homelab) - very simple backend

Nevin1901 1mo ago

Cloudflare tunnels are really useful when dealing with webhooks. Way better than Ngrok and you can set it up on a custom subdomain you own. eg: site.yourdomain.com

zahidrasool 1mo ago
[flagged]

geroge_kyaw 1mo ago

Lol Codex UI!!!

shmde 1mo ago

I have used this extensively previously when I had to quickly share a UI prototype with my Product manager. There used to be all sorts of cors error when I also had a backend. Then I realised its just better to make a branch and deploy it in amplify and add the cors origin in the backend. But its good for quick UI sharing

cliftonc 1mo ago

I use this a lot, but find it a bit hard to manage if you want a persistent tunnel locally to use for dev (e.g. webhooks etc), so I added a wrapper around it that you can easily use: https://github.com/cliftonc/cfld https://github.com/cliftonc/cfld

itvision 1mo ago

The RAM pricing crisis is doing wonders to the software industry. Amazing.

cbsmith 1mo ago

What could possibly go wrong? ;-)

shiftnotes 1mo ago

[flagged]

apolloswave 1mo ago

[flagged]

peter_retief 1mo ago

I have been using CF tunnels for quite some time, very useful if you want to ingest mail on a local server without a public IP and hosting anything locally. They are providing this for free up to a point, I wonder if all developers are aware of this amazing offering?

adamch 1mo ago

Lovely to see Cloudflare Tunnel frontpage on HN. Working on Tunnel was the highlight of my career. It was a fun product with a lot of bugs to fix, features to add, architecture to design. We were all working in-person, solving incidents together, getting lunch together every day. Taught me so many important skills that have helped me in every other project I've ever worked on.

abalashov 1mo ago

Ah, an ngrok competitor. It's what we elderly (~40 myself), yelling-at-clouds types call "reverse SSH tunnels", but this is an anachronism from the era of knowing how to do things rather than paying for managed SaaS products to do them. Don't mind me, just yelling at clouds...

appleappleapple 1mo ago

Lol this landing page looks almost exactly like something my company just put out. Holy AI

AlisaYoki 1mo ago

[dead]