Requirements: CoreSSH Server, cloudflared

Introduction

You can configure CoreSSH Server to be publicly accessible through the Cloudflare global network. This method requires you to onboard a domain to Cloudflare and install a websocket client called cloudflared on both the server and the user's device.

Before you get started

First ensure that your Cloudflare account is configured correctly. If you are using an existing website and this is your first experience getting started with Cloudflare then generally you just need to activate your account and follow the instructions after login.

If you already have a Cloudflare account then you should navigate in the dashboard to Domains > Onboard a website.

Route traffic through Cloudflare

The most important step to ensure traffic is routed through the Cloudflare network is to update your nameservers with your domain registrar. The instructions for this varies depending on the registrar but it should be simple.

For instance, with GoDaddy all you should need to do is go to DNS > Nameservers > Change Nameservers then enter your assigned Cloudflare nameservers and that's it.

Create a Cloudflare Tunnel

A tunnel will allow you to publish the application to the outside world. In the Cloudflare dashboard, look for Zero Trust or Cloudflare One and this will take you to the home page.

Navigate to Networks > Connectors > Add a tunnel. Select the tunnel type (cloudflared) and name then click Save tunnel. That is all that's required to begin. The tunnel setup will give you the option to install the cloudflared connector after that.

Install cloudflared on the Server

The cloudflared application is resonsible for connecting to Cloudflare's global network and setting up a reverse proxy to the system where it is running. After running the installer on your server, run the Cloudflare-provided command displayed during the tunnel setup. It looks like this:

C:\Windows\System32>cloudflared.exe service install eyJhIjoiYTJ... 2026-02-03T17:17:30Z INF Installing cloudflared Windows service 2026-02-03T17:17:30Z INF cloudflared agent service is installed windowsServiceName=Cloudflared 2026-02-03T17:17:30Z INF Agent service for cloudflared installed successfully windowsServiceName=Cloudflared

Finishing Tunnel Creation

Cloudflare will ask you to set published application configuration. Set the Service Type dropdown to SSH. Set the URL to the deployment machine's internal IP address (e.g. localhost:22) then click Complete Setup.

If you encounter an error like An A, AAAA, or CNAME record with that host already exists, Cloudflare is preventing you from creating new DNS records that may confuse DNS servers. Decide whether to keep or delete the existing records to make a new tunnel.

Connecting to CoreSSH Server

The cloudflared tool must be installed on the client system too. You have a few options for connecting to the server once this tool has been installed. First, you may use the built-in cloudflared sftp client by running a command like this:

C:\Windows\System32>cloudflared.exe access sftp reese@coressh.example.com
CoreSSH Server (www.coressh.com)
reese@coressh.example.com's password:
Connected to coressh.example.com.
sftp>

Alternatively, you can create a connection from this device to Cloudflare by running the below command. This can be saved as a desktop shortcut so that end users do not need to use the command line. After that, use the client of your choice to connect to the specified url.

cloudflared access tcp --hostname coressh.example.com --url localhost:9210

In a separate command session or inside the tool of your choice:

C:\Windows\System32>sftp reese@localhost -P 9210
CoreSSH Server (www.coressh.com)
reese@coressh.example.com's password:
Connected to localhost.
sftp>