Hacker News Reader

Comment by AdrienPoupa | Hacker News Reader

This is very cool, but you should not use Cloudflare Tunnels to stream media. This is forbidden by their terms of service (or at the very least not the intended use of Tunnels and they may disable your service). Use Wireguard or Tailscale instead.

https://www.xda-developers.com/cloudflare-tunnels-are-great-...

View on HN

Yep, I rent a $5 VPS in my region that I tailscale to for exactly that reason, as well as to un-CGNAT myself.

For an easy GUI solution for the latter, highly recommend Nginx Proxy Manager.

Cloudflare Tunnel publicly exposes your services, whereas Wireguard/Tailscale are VPNs.

Tailscale (but not Headscale) offers Funnel, which is a reverse proxy, but you cannot use it with your own domain.

Pangolin is the closest alternative to CF Tunnel, but self-hosted NetBird with reverse proxy functionality can also be used.

The intersection of people who can self host headscale or netbird and those who can not set up their own reverse proxy is probably the empty set.

Can tailscale funnel do custom domains yet?

Personally I'm switching to rathole+traefik, weirdly something I was researching and experimenting with in the early hours of this morning (I have now not slept and have to go to work).

Haven't used it like that myself, but stumbled upon this last year

https://tailscale.com/docs/concepts/domain-ownership

This let's you use your own domain for your tailnet, isn't the funnel but - but isn't it even better? Unless you actually want a publicly routable domain name, then you're back some hosted ingress I guess

IIRC CF terms were about caching media not streaming media

Since https://blog.cloudflare.com/updated-tos it is not completely clear if you disable Cloudflare's cache indeed. Still the terms are unclear enough that they could cut you out, and I'd feel uneasy exposing a Jellyfin instance publicly, but that's just me :)

Reply on news.ycombinator.com