cloudflared
Cloudflare Tunnel client with NetBSD support
Star
Fork
Watch

Commits on master

Miguel da Costa Martins Marcelino
VULN-141859: Normalize request path when using access rules
committed
Devin Carr
chore: stabilize websocket event tests
committed
Miguel da Costa Martins Marcelino
chore: Retry DNS resolution
committed
João "Pisco" Fernandes
TUN-10808: Cancel QUIC reads when request bodies close
committed
João "Pisco" Fernandes
Release 2026.9.3
committed
João "Pisco" Fernandes
chore: Update dependencies
committed
João "Pisco" Fernandes
Release 2026.9.2
committed
João "Pisco" Fernandes
TUN-10798: Harden protected Quick Tunnel CLI behavior
committed
Miguel da Costa Martins Marcelino
TUN-10926: Broker JWKS cache expiration
committed
João "Pisco" Fernandes
chore: Enable --allowed-mail flag and mac runners
committed
Miguel da Costa Martins Marcelino
chore: Add upper bounds to supplied emails
committed
Miguel da Costa Martins Marcelino
chore: Protect headers before flush
committed
Miguel da Costa Martins Marcelino
chore: Limit response size
committed
Miguel da Costa Martins Marcelino
chore: Avoid logging request body
committed
Miguel da Costa Martins Marcelino
TUN-10805: Strip authentication data before forwarding requests
committed
Renovate
Update gcr.io/distroless/base-debian13:nonroot Docker digest to 0896741
committed
Renovate
Update gcr.io/distroless/base-debian13:nonroot-amd64 Docker digest to 65795e7
committed
Alessandro Frigerio
TUN-10804: Enforce authentication before origin access
committed
Alessandro Frigerio
TUN-10803: Wire Quick Tunnel callback authorization
committed
Alessandro Frigerio
TUN-10803: Authorize Quick Tunnel callbacks
committed
Alessandro Frigerio
TUN-10803: Add Quick Tunnel recipient policy
committed
Alessandro Frigerio
TUN-10802: Manage process-local authentication sessions
committed
Miguel da Costa Martins Marcelino
Revert "chore: Fix unbounded channel"
committed
Miguel da Costa Martins Marcelino
chore: Fix unbounded channel
committed
Alessandro Frigerio
TUN-10801: Validate quick tunnel broker assertions
committed
Alessandro Frigerio
TUN-10801: Cache quick tunnel broker JWKS
committed
Alessandro Frigerio
TUN-10800: Wire Quick Tunnel authentication redirects
committed
Alessandro Frigerio
chore: Update gRPC to v1.83.1
committed
Alessandro Frigerio
TUN-10800: Consume authentication callback state
committed
Alessandro Frigerio
TUN-10800: Add browser-bound login state
committed
João "Pisco" Fernandes
ci: Disable macOS builds while runners are unavailable
committed
Devin Carr
Release 2026.9.1
committed
Devin Carr
chore: Mark transport-loglevel deprecated
committed
Miguel da Costa Martins Marcelino
chore: Add notes on breaking changes
committed
Miguel da Costa Martins Marcelino
Revert "chore: Cleanup unused transport log level"
committed
Devin Carr
Release 2026.9.0
committed
Devin Carr
chore: Cleanup unused transport log level
committed
João Oliveirinha
TUN-10738: Propagate edge registration errors over QUIC and fix supervisor error classification
committed
Renovate
Update gcr.io/distroless/base-debian13:nonroot Docker digest to d199d20
committed
Renovate
Update gcr.io/distroless/base-debian13:nonroot-amd64 Docker digest to 1411d9a
committed
Devin Carr
TUN-10834: Bump Go toolchains to 1.26.8
committed
Alessandro Frigerio
TUN-10799: Negotiate protected mode during Quick Tunnel provisioning
committed
Devin Carr
TUN-10829: Remove vendoring
committed
James Royal
AUTH-8883 Fix Access token lock self-deadlock during same-process reauth
committed
Alessandro Frigerio
fix(ci): use fresh clone for Windows jobs
committed
João "Pisco" Fernandes
Release 2026.8.3
committed
Alessandro Frigerio
TUN-10798: Parse Quick Tunnel allowed mail rules
committed
Hugo Vicente
chore: Remove stale metrics timeout TODO
committed
Devin Carr
TUN-10822: Remove fetching protocol percentage from remote
committed
Devin Carr
chore: Clean up unused code
committed
Devin Carr
TUN-10820: Remove test-only stdin reconnect control
committed
João "Pisco" Fernandes
VULN-142146: Update GitLab R2 token path (cloudflared-pkgs) to protected branches
committed
Devin Carr
TUN-10725: Remove unused certificate configuration
committed
Devin Carr
chore: bump gorilla/websocket for GO-2026-6278
committed
João "Pisco" Fernandes
chore: Update distrolesss images in amd64
committed
João "Pisco" Fernandes
Release 2026.8.2
committed
Miguel da Costa Martins Marcelino
VULN-141859: Revert path normalization
committed
João "Pisco" Fernandes
Release 2026.8.1
committed
Miguel da Costa Martins Marcelino
VULN-141859: Fix missing trailing slash
committed
João "Pisco" Fernandes
Release 2026.8.0
committed