--- title: Do You Really Need to Open a Port to Expose an Application? description: A discussion post raises the question of whether applications need open inbound ports to be exposed externally, pointing to Cloudflare Tunnel as an alternative... canonical: https://daily.dev/posts/do-you-really-need-to-open-a-port-to-expose-an-application--filwvbbhx twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Do You Really Need to Open a Port to Expose an Application? | daily.dev og:description: A discussion post raises the question of whether applications need open inbound ports to be exposed externally, pointing to Cloudflare Tunnel as an alternative... og:url: https://daily.dev/posts/do-you-really-need-to-open-a-port-to-expose-an-application--filwvbbhx og:image: https://api.daily.dev/og/posts/FiLwVbBhx.png og:image:alt: Do You Really Need to Open a Port to Expose an Application? og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Do You Really Need to Open a Port to Expose an Application? **[DevOps & Platform Engineering Hub](https://daily.dev/sources/sanjay)** · [@divyansh30](https://daily.dev/divyansh30) · 1 min read · 0 upvotes · 0 comments ## Summary A discussion post raises the question of whether applications need open inbound ports to be exposed externally, pointing to Cloudflare Tunnel as an alternative where the connector makes an outbound connection to Cloudflare instead of exposing a firewall port. The post poses open questions to DevOps and platform engineers about TLS handling, access control, and whether they'd use tunnels for internal dashboards or production apps, and links to a step-by-step guide covering Cloudflare Tunnel with Kubernetes ClusterIP services, DNS routing, and TLS configuration. ## Content Exposing an application usually means thinking about open ports, firewall rules, TLS, and how much of your infrastructure you want reachable from the internet. But what if the application could stay behind the firewall while still being accessible externally? That's what I find interesting about Cloudflare Tunnel. The connector establishes an outbound connection to Cloudflare, so you don't need to expose an inbound port directly to the application. I'm curious how other DevOps and platform teams approach this: - Do you still expose ports directly for your applications? - Have you used Cloudflare Tunnel or something similar? - How do you handle TLS and access control? - Would you use this approach for internal dashboards or production applications? I came across a practical walkthrough showing Cloudflare Tunnel with Kubernetes, including `ClusterIP` services, DNS routing, TLS, and the tunnel configuration. [https://www.kubeblogs.com/how-to-securely-expose-your-applications-using-cloudflare-tunnel-step-by-step-guide/](https://www.kubeblogs.com/how-to-securely-expose-your-applications-using-cloudflare-tunnel-step-by-step-guide/) What's your preferred way to securely expose applications? #DevOps #PlatformEngineering #CloudSecurity #Kubernetes #Cloudflare ## Similar posts on daily.dev - [My ISP stuck me behind CGNAT, and a free Cloudflare tunnel made my home server reachable again](https://daily.dev/posts/my-isp-stuck-me-behind-cgnat-and-a-free-cloudflare-tunnel-made-my-home-server-reachable-again-k8tt9qe2s) · XDA Developers · 0 upvotes · 0 comments - [Cloudflare Tunnels — How it works BTS?](https://daily.dev/posts/cloudflare-tunnels-how-it-works-bts--rb3kdcmnd) · Medium · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#devops](https://daily.dev/tags/devops), [#kubernetes](https://daily.dev/tags/kubernetes) [View this post on daily.dev](https://daily.dev/posts/do-you-really-need-to-open-a-port-to-expose-an-application--filwvbbhx) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"DiscussionForumPosting","mainEntityOfPage":"https://daily.dev/posts/do-you-really-need-to-open-a-port-to-expose-an-application--filwvbbhx","headline":"Do You Really Need to Open a Port to Expose an Application?","text":"A discussion post raises the question of whether applications need open inbound ports to be exposed externally, pointing to Cloudflare Tunnel as an alternative where the connector makes an outbound connection to Cloudflare instead of exposing a firewall port. The post poses open questions to DevOps and platform engineers about TLS handling, access control, and whether they'd use tunnels for internal dashboards or production apps, and links to a step-by-step guide covering Cloudflare Tunnel with Kubernetes ClusterIP services, DNS routing, and TLS configuration.","url":"https://daily.dev/posts/do-you-really-need-to-open-a-port-to-expose-an-application--filwvbbhx","datePublished":"2026-08-31T04:44:42.272Z","dateModified":"2026-08-31T04:44:58.062Z","author":{"@type":"Person","name":"Divyansh","url":"https://daily.dev/divyansh30","image":"https://media.daily.dev/image/upload/s--f9lbkpFv--/f_auto/v1744873189/avatars/avatar_JMQ4qarKTe7zPurSPRrzM","description":"Aspiring engineer with an interest in AI, tech and DevOps :)","interactionStatistic":{"@type":"InteractionCounter","interactionType":{"@type":"EndorseAction"},"userInteractionCount":840}},"image":"https://media.daily.dev/image/upload/s--bSyp5jy4--/f_auto/v1788151482/posts/FiLwVbBhx?_a=BAMAMicg0","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"isPartOf":{"@type":"WebPage","url":"https://daily.dev/squads/sanjay","name":"DevOps & Platform Engineering Hub"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"DevOps & Platform Engineering Hub","item":"https://daily.dev/squads/sanjay"},{"@type":"ListItem","position":3,"name":"Do You Really Need to Open a Port to Expose an Application?"}]} ```