Create and run a remotely managed tunnel

Create a remotely managed tunnel in the current Cloudflare dashboard, choose the connector platform, and run the generated installation command on a disposable host.

The connector token is a credential that can add a replica to the tunnel. Keep it out of shell history, logs, images, and source. Run cloudflared as a supervised service and verify the connector appears healthy before adding routes.

Install one practice connector, record its service status and version, and locate its revoke or rotation control.

Authenticate cloudflared on the connector host, then create one named tunnel:

cloudflared tunnel login
cloudflared tunnel create practice-app
cloudflared tunnel list

The login flow grants account access, so use a controlled host and remove stale credentials. Record the tunnel ID separately from the display name. Run the connector as a service only after one foreground connection reaches a disposable origin.