Cloudflare Tunnel

Cloudflare Tunnel creates a secure, outbound-only connection between your origin server and the Cloudflare edge without opening any inbound firewall ports.

Stop poking holes in your firewall. Cloudflare Tunnel uses a lightweight daemon (cloudflared) to establish an encrypted outbound connection to the nearest Cloudflare data center. This architecture effectively hides your origin IP address from the public internet, neutralizing DDoS risks and unauthorized scanning. Whether you are exposing a local web server on port 80 or securing SSH access to a private instance, the tunnel handles the heavy lifting of DNS routing and SSL termination. It integrates directly with Cloudflare Access, allowing you to enforce Zero Trust policies (like identity-based authentication) before a single packet reaches your infrastructure.

https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/