Cloudflare Tunnel + Tailscale 内网穿透最佳实践

免费方案实现内网服务公网访问，支持 HTTPS，永久免费，无需服务器。

方案原理

Cloudflare Tunnel：将内网服务通过 Cloudflare 边缘节点暴露到公网

Tailscale：WireGuard 组网，零配置内网互通

部署步骤

### 1. 安装 cloudflared

curl -L https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-linux-amd64 -o /usr/local/bin/cloudflared

chmod +x /usr/local/bin/cloudflared

### 2. 创建 Tunnel

cloudflared tunnel create my-tunnel

cloudflared tunnel route dns my-tunnel your-domain.com

### 3. 配置服务

# /etc/cloudflared/config.yml

tunnel: <你的tunnel-id>

credentials-file: /root/.cloudflared/credentials.json

ingress:

- hostname: your-domain.com

service: http://localhost:3000

优势

1. 永久免费

2. 自动 HTTPS

3. 无需公网 IP

4. 配置简单