You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
2.[Get](/api/resources/zero_trust/subresources/access/subresources/applications/methods/list/) the `id` of the `dash_sso` Access application. You can use [`jq`](https://jqlang.github.io/jq/download/) to quickly find the correct application:
Copy file name to clipboardExpand all lines: src/content/docs/cloudflare-one/connections/connect-devices/agentless/pac-files.mdx
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -211,7 +211,7 @@ To get the domain of a proxy endpoint:
211
211
1. Use the [List proxy endpoints](/api/resources/zero_trust/subresources/gateway/subresources/proxy_endpoints/methods/list/) operation to get a list of your proxy endpoints and their details. For example:
Copy file name to clipboardExpand all lines: src/content/docs/cloudflare-one/connections/connect-devices/warp/configure-warp/device-profiles.mdx
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -35,7 +35,7 @@ Your profile will appear in the **Profile settings** list. You can rearrange the
35
35
Send a `POST` request to the [Devices endpoint](/api/resources/zero_trust/subresources/devices/subresources/policies/subresources/custom/methods/create/):
After refreshing the token, `cloudflared` can no longer establish new connections to Cloudflare using the old token. However, existing connectors will remain active and the tunnel will continue serving traffic.
190
+
<TabssyncKey="dashPlusAPI">
191
+
<TabItemlabel="Dashboard">
192
+
1. In [Zero Trust](https://one.dash.cloudflare.com/), go to **Networks** > **Tunnels**.
193
+
2. Select a `cloudflared` tunnel and select **Edit**.
194
+
3. Select **Refresh token**.
195
+
4. Copy the `cloudflared` installation command for your operating system. This command contains the new token.
196
+
197
+
</TabItem>
198
+
<TabItemlabel="API">
199
+
200
+
1. Generate a random base64 string (minimum size 32 bytes) to use as a tunnel secret:
201
+
202
+
```sh
203
+
openssl rand -base64 32
204
+
```
205
+
206
+
```sh output
207
+
AQIDBAUGBwgBAgMEBQYHCAECAwQFBgcIAQIDBAUGBwg=
208
+
```
209
+
210
+
2. Make a `PATCH` request to the [Cloudflare Tunnel](/api/resources/zero_trust/subresources/tunnels/methods/edit/) endpoint:
After refreshing the token, `cloudflared` can no longer establish new connections to Cloudflare using the old token. However, existing connectors will remain active and the tunnel will continue serving traffic.
249
252
250
253
2. On half of your `cloudflared` replicas, update `cloudflared` to use the new token. For example, on a Linux host:
251
254
252
-
```sh
253
-
sudo cloudflared service install <TOKEN>
254
-
```
255
+
```sh
256
+
sudo cloudflared service install <TOKEN>
257
+
```
255
258
256
259
3. Restart `cloudflared`:
257
260
258
-
```sh
259
-
sudo systemctl restart cloudflared.service
260
-
```
261
+
```sh
262
+
sudo systemctl restart cloudflared.service
263
+
```
261
264
262
265
4. Confirm that the service started correctly:
263
-
```sh
264
-
sudo systemctl status cloudflared
265
-
```
266
266
267
-
While these replicas are connecting to Cloudflare with the new token, traffic will automatically route through the other replicas.
267
+
```sh
268
+
sudo systemctl status cloudflared
269
+
```
270
+
271
+
While these replicas are connecting to Cloudflare with the new token, traffic will automatically route through the other replicas.
268
272
269
273
5. Wait 10 minutes for traffic to route through the new connectors.
270
274
@@ -278,29 +282,31 @@ If your tunnel token is compromised, we recommend taking the following steps:
278
282
279
283
1. Refresh the token using the dashboard or API. Refer to Step 1 of [Rotate a token without service disruption](#rotate-a-token-without-service-disruption).
280
284
2.[Delete all connections](/api/resources/zero_trust/subresources/tunnels/subresources/connections/methods/delete/) between `cloudflared` and Cloudflare:
[Access for Infrastructure](/cloudflare-one/applications/non-http/infrastructure-apps/) provides granular control over how users can connect to your SSH servers. This feature uses the same deployment model as [WARP-to-Tunnel](/cloudflare-one/connections/connect-networks/use-cases/ssh/ssh-warp-to-tunnel/) but unlocks more policy options and command logging functionality.
15
15
16
-
<Renderfile="access/short-lived-certs-intro"params={{ intro: "Furthermore, Access for Infrastructure replaces" }} />
16
+
<Render
17
+
file="access/short-lived-certs-intro"
18
+
params={{ intro: "Furthermore, Access for Infrastructure replaces" }}
19
+
/>
17
20
18
21
## 1. Connect the server to Cloudflare
19
22
@@ -31,8 +34,7 @@ To connect your devices to Cloudflare:
@@ -55,9 +57,11 @@ To generate a Cloudflare SSH CA and get its public key:
55
57
<Renderfile="ssh/ssh-proxy-ca" />
56
58
57
59
### Save the public key
60
+
58
61
<Renderfile="ssh/public-key" />
59
62
60
63
### Modify your SSHD config
64
+
61
65
<Renderfile="ssh/modify-sshd" />
62
66
63
67
:::note
@@ -66,9 +70,11 @@ For certain distributions, such as Amazon Linux 1 (based on RHEL), the certifica
66
70
```sh
67
71
chmod 600 /etc/ssh/ca.pub
68
72
```
73
+
69
74
:::
70
75
71
76
### Restart your SSH server
77
+
72
78
<Renderfile="ssh/restart-server" />
73
79
74
80
## 7. Connect as a user
@@ -112,13 +118,14 @@ Cloudflare will stop logging SSH commands to your targets, as well as any comman
112
118
To delete the SSH encryption public key using the [API](/api/resources/zero_trust/subresources/gateway/subresources/audit_ssh_settings/methods/update/):
113
119
114
120
```sh
115
-
curl --request PUT https://api.cloudflare.com/client/v4/accounts/{account_id}/gateway/audit_ssh_settings \
121
+
curl --request PUT https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/gateway/audit_ssh_settings \
0 commit comments