Skip to main content

🌐 Cloudflare Tunnel

Project​

GraniteLabs.ai – Secure Remote Access (Blue Iris)
Status: All Three Phases Complete

🎯 Objective​

Replace traditional remote access methods with a modern Zero Trust architecture that provides secure, authenticated access to Blue Iris without exposing the internal network.

🧠 What This Replaces​

Old MethodRisk
Port forwardingExposes WAN IP and internal services
Direct WAN exposureVulnerable to scanning and attacks
VPN dependencyComplex setup, open inbound ports

✅ What This Achieves​

  • No open inbound firewall ports
  • WAN IP never exposed
  • HTTPS enforced at Cloudflare
  • Identity-based authentication required
  • Outbound-only connector on internal network

System Architecture​

Remote User
    │
    ▼
Cloudflare (DNS + HTTPS + Authentication)
    │
    ▼
Secure Tunnel (Outbound Only)
    │
    ▼
Blue Iris PC (cloudflared)
    │
    ▼
Blue Iris Web Server