Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitchesiTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
To share a local HTTP app, install cloudflared, start your server, and run cloudflared tunnel --url http://localhost:8080. Cloudflare creates a random trycloudflare.com address that you can send to a tester, client, teammate, or webhook provider. The address works only while the command is running, and anyone who knows it can reach the service unless you add an email restriction. Quick Tunnels need neither a Cloudflare account nor a domain, but they are for temporary testing and development—not a dependable production endpoint.
How do I make localhost public with Cloudflare Tunnel?
Use a Quick Tunnel. It creates an outbound connection from your computer to Cloudflare, so you do not have to configure router port forwarding, give your machine a public IP address, or open an inbound firewall port.
What you need first
- A local HTTP application that is already running.
- The port on which that application listens, such as
8080. - The
cloudflaredcommand-line program installed on the same computer. - A terminal that can remain open for as long as people need access.
Quick Tunnels do not require a Cloudflare account or a domain. They are intended for development and testing rather than a permanent public service.
Quick Tunnel procedure
- Start your local server. For this example, it must be reachable at
http://localhost:8080. - Open a second terminal and run
cloudflared tunnel --url http://localhost:8080. Replace8080with your application’s actual port. - Wait for
cloudflaredto print a randomtrycloudflare.comURL. - Copy that address and send it to the people or service that needs to test your application.
- Leave the
cloudflaredprocess running. Stopping it immediately ends access to the local service.
The generated hostname is temporary. A new Quick Tunnel receives a different hostname, so do not treat the address as a permanent bookmark or integration endpoint.
#1 Best Overall
- Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
- Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
- Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
- Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
- 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.
What does Cloudflare Tunnel change about localhost access?
cloudflared makes an outbound, encrypted connection from your machine to Cloudflare. Cloudflare then forwards matching requests through that established connection to the local HTTP service. Your origin does not need an inbound public route.
This design is different from traditional port forwarding. With port forwarding, a router sends unsolicited Internet traffic directly to a port on your network. With a tunnel, the local connector initiates the connection outward and continues listening for requests over it. Cloudflare describes this model as providing “No open inbound ports. No public IPs. No attack surface.” That wording is Cloudflare’s product claim, not an independent security certification; your application, credentials, dependencies, and tunnel configuration still require normal security controls.
The local service remains local to the computer running cloudflared. The public URL is only a route to that process while its connection is alive.
How can I restrict a trycloudflare.com URL?
Add one or more allowed email addresses when you start the Quick Tunnel. Visitors are sent through an interactive browser authentication flow, and only addresses on the allow-list can continue.
cloudflared tunnel --url http://localhost:8080 --allowed-mail alice@example.comTo allow several addresses, repeat the option:
cloudflared tunnel --url http://localhost:8080
--allowed-mail alice@example.com
--allowed-mail bob@example.comYou can also pass a quoted wildcard for a domain:
cloudflared tunnel --url http://localhost:8080 --allowed-mail '*@example.com'Use quotes around the wildcard so your shell does not expand the asterisk before cloudflared receives it. Email authentication requires a person to complete an interactive browser session. A non-interactive client—such as a webhook sender, command-line callback, or automated test runner—cannot complete that browser challenge. For those clients, protect the application itself or use a named tunnel with an access-control design appropriate to the service.
Rank #2
- 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
- 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
- Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
- 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
- What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.
Without an email restriction, the URL is a bearer credential: anyone who obtains it can make requests. Avoid putting secrets, private customer data, administrative controls, or production credentials behind an unrestricted Quick Tunnel.
What are the limits of a Quick Tunnel?
Quick Tunnels are deliberately lightweight. The following constraints affect whether they are suitable for a preview or test:
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware match| Constraint | Practical effect |
|---|---|
| 200 in-flight requests per Quick Tunnel | When more than 200 requests are active at once, additional requests receive HTTP 429. |
| No Server-Sent Events (SSE) | Applications that depend on SSE streaming will not work correctly through a Quick Tunnel. |
| No uptime guarantee | The endpoint is not a service-level-guaranteed URL and can be unsuitable for an always-on application. |
| Process-bound lifetime | Stopping or losing the cloudflared process ends public access. |
| Changing hostname | Each newly created Quick Tunnel gets a different random trycloudflare.com address. |
The 200-request figure is a concurrency limit, not a monthly visitor allowance. A slow request can remain in flight and consume one of those slots until it completes. If a test suddenly starts returning 429, reduce concurrent traffic or move the workload to a production-configured tunnel rather than repeatedly restarting the Quick Tunnel.
Is a Quick Tunnel suitable for production?
No. It is suitable for a temporary preview, browser-based acceptance test, client demonstration, or webhook experiment, but it is not a stable production endpoint.
- There is no uptime guarantee.
- The hostname is not stable across tunnel creations.
- Traffic above the documented 200 in-flight-request limit receives HTTP
429. - SSE is unsupported.
- An unrestricted URL can be used by anyone who discovers it.
- Email gating depends on an interactive browser and therefore cannot protect non-interactive integrations.
Run the local app with test data and test credentials. Remove the public address from chat messages and issue trackers when the test ends, because old copies can still be used for as long as that tunnel process remains active.
Rank #3
- Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
- Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
- Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
- Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
- What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.
What is the difference between a Quick Tunnel and a named tunnel?
A Quick Tunnel optimizes for speed and zero setup. A named tunnel is an account-managed configuration intended for a persistent hostname and a controlled deployment.
Recommended Free Tools
| Feature | Quick Tunnel | Named tunnel |
|---|---|---|
| Account and domain | Neither is required. | A Cloudflare account and a domain on Cloudflare are required for a published application. |
| Public address | Random trycloudflare.com hostname. |
Stable custom hostname, such as app.example.com. |
| Lifetime | Ends when the running process stops. | Persistent, account-managed tunnel that you run as a service or container. |
| Typical use | Testing, development, previews, and short demonstrations. | Production or stable sharing with planned routing and access controls. |
| Access model | Open to anyone with the URL unless an email allow-list is enabled. | Controlled through hostname routing and separate access controls. |
| Capacity planning | Documented 200 in-flight-request limit, no SSE, and no uptime guarantee. | Use a production configuration and plan capacity for the application. |
How do I create a stable named tunnel?
A named tunnel takes more setup but gives you a hostname that can remain associated with the application. The exact dashboard labels can change, so verify the current wording in your Cloudflare account as you configure it.
- Create or sign in to a Cloudflare account and add the domain that will host the application.
- Create a named tunnel and install or authenticate
cloudflaredon the machine that can reach the local service. - Add a published application route. For example, map
app.example.comtohttp://localhost:8080. - Create the proxied DNS record for the hostname, pointing it to the tunnel’s
cfargotunnel.comtarget. - Run
cloudflaredas a service or container so the connector starts again after a reboot and is supervised if it exits. - Define ingress rules that send the intended hostname to the local service. End the production ingress configuration with a catch-all rule, commonly
service: http_status:404, so unmatched hostnames are rejected instead of being routed accidentally.
A named tunnel can carry multiple resources and protocols. Cloudflare notes that SSH, TCP, and RDP connections require cloudflared on the client side as well; a browser-only URL is not the same thing as a generic TCP port exposed to every client.
How do I troubleshoot a localhost tunnel?
The URL loads but the application is unreachable
Confirm that the local server is actually running and that its port matches the URL passed to --url. If the app is on port 3000, for example, running a tunnel against port 8080 sends requests to the wrong process. Test the local address on the same computer before troubleshooting the public URL.
The URL stopped working
Check the terminal running cloudflared. Closing the terminal, interrupting the command, logging out of the machine, or losing the process ends the Quick Tunnel. Restart the command to create a new public hostname and send the new address to testers.
Rank #4
- Dual Converters, Infinite Potential：Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
- Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
- Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
- Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
- Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft
Requests return HTTP 429
A Quick Tunnel returns 429 when its 200 in-flight-request limit is exceeded. Wait for existing requests to finish, reduce parallel test traffic, or use a named tunnel with production capacity planning for a larger workload.
A streaming page does not update
Quick Tunnels do not support Server-Sent Events. Replace SSE with a test method that the tunnel supports, or use a production architecture whose protocol requirements are explicitly supported.
A webhook provider cannot reach an email-restricted tunnel
The provider is not a human browser and cannot complete the interactive email authentication flow. Remove that restriction only for a controlled test and authenticate the webhook in the application, or move the integration to a named tunnel and configure suitable access controls.
The tunnel works locally but exposes too much
Review the local server itself. A tunnel forwards what the origin serves; it does not remove administrative routes, debug panels, file browsers, or test credentials from the application. Start with a sanitized dataset, disable development-only controls, and stop the process as soon as the sharing session ends.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Which Cloudflare Tunnel option should I use?
Choose based on how long the address must live and who must connect.
Best Value
- 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
- Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
- Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
- HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
- What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
- Use a Quick Tunnel when you need a URL in minutes for a short-lived browser preview, a client review, a temporary test, or a one-off webhook experiment.
- Add an email allow-list when identifiable human testers need access and can complete a browser sign-in.
- Use a named tunnel when the hostname must remain stable, the endpoint must restart automatically, the service is customer-facing, or clients include automated systems and non-browser protocols.
- Keep the application protected separately in every case. Tunnel reachability is not a substitute for application authentication, authorization, input validation, logging, and safe test data.
For a temporary share, the command cloudflared tunnel --url http://localhost:8080 is the complete starting point. For a durable public service, plan the account, domain, DNS, ingress, process supervision, protocol support, and access controls before inviting real users.
Frequently Asked Questions
Can I share a Quick Tunnel with someone outside my network?
Yes. The generated hostname is reachable over the Internet, so the recipient does not need to be on your Wi-Fi or connected to your VPN. They only need the current URL and, if enabled, the ability to complete the browser-based email check.
Does my local app need to listen on a public network interface?
No. The connector is designed to reach the origin locally on the machine where it runs. Keep the origin bound to its normal local address; the tunnel supplies the external route.
Can an automated CI test use an email-protected Quick Tunnel?
Not directly. Email protection requires an interactive browser session, which a non-interactive CI client cannot perform. Put authentication in the test application or use a named-tunnel design that supports the client workflow.
What should I do with the URL after a demo?
Stop the running cloudflared process and revoke any temporary credentials used by the demo. Because copied links are bearer access while the process is alive, remove them from shared notes and chats where practical.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
