Set up BYOH with Cloudflare Tunnel

Choose Cloudflare Tunnel when you need supported public web apps without a reachable public server IP or router port forwarding. You need your own Cloudflare account and a domain managed there.

Connect the account

1. Open the BYOH server’s connection setup and choose Cloudflare Tunnel.
2. Create a scoped Cloudflare API token with the permissions requested by the panel: Cloudflare Tunnel Edit, DNS Edit and Zone Read for the intended account and zone.
3. Enter the token through the panel and select your account/domain as prompted.
4. Save the configuration and generate the installer.
5. Install the agent and check that the server and tunnel are connected.

A tunnel connector token and a Cloudflare API token are different. A connector token lets a connector join a tunnel; it is not by itself permission to manage DNS. Use the credential type requested by the setup form.

Deploy an app

Choose the connected server and a compatible web app. Select the hostname carefully before deployment: Tunnel hostnames cannot be changed afterward through the normal panel workflow. This mode uses your domain, not a Caliber-provided hostname.

The tunnels and DNS belong to your Cloudflare account and use its allowances. Do not delete those records or revoke the API token without considering the effect on app access and management.

Public mail, SFTP and arbitrary TCP/UDP services are not provided through this web tunnel. See connection limitations.