Flavio Copes compares Tailscale, Cloudflare Tunnel

The author compares configuring a DigitalOcean cloud firewall, Tailscale, and Cloudflare Tunnel to secure a test server running a web app, Postgres, and SSH. Testing reveals that a standard ufw configuration leaves Docker-published ports exposed, which a cloud firewall successfully blocks. The author finds that Tailscale provides direct WireGuard connections for private administrative access, while Cloudflare Tunnel securely routes public web traffic without opening inbound firewall ports. Open article →