Quick answer: With Cloudflare Tunnel you reach your VPS over HTTPS without opening ports 80/443 – DDoS protection included.
Related
Webspace & domains: Order webspace · Register domain · nexorahost.com (Germany · Frankfurt · SSL included)
Frequently asked questions (FAQ)
What is Cloudflare Tunnel?
cloudflared builds an outbound connection to Cloudflare – your server needs no open HTTP ports. Traffic goes through Cloudflare CDN + DDoS protection.
Tunnel vs normal Cloudflare proxy?
Proxy: A record to server IP, ports 80/443 open. Tunnel: outbound only, IP can stay hidden, ideal for home server/VPS.
Is Cloudflare Tunnel free?
Yes for standard tunnels. Zero Trust features (access policies) have a generous free tier.
Tunnel with Docker?
Yes – cloudflare/cloudflared container with config.yml. Often combined with Traefik on internal network.
Downsides?
Dependency on Cloudflare. Slightly higher latency. Often unsuitable for game server UDP – HTTP/HTTPS/TCP only.