luci-app-cloudflared: configure Cloudlfare Zero Trust Tunnel

[stokito]

Configure a tunnel and see logs of the daemon.

Replaces #6834

[stokito]

I also added a code to extract a token from the run command. The Cloudflare dashboard has a button to copy the command.

[stokito]

@1715173329 @oskarirauta @scottmckenzie @jjpinom
You must be interested in the app. Can you please try it and test?

[jjpinom]

Hello @stokito , thanks.

I've already tested it. I was able to establish a Coudflared Tunnel but the tunnel does not start automatically upon OpenWRT start.

[systemcrash]

Hello @stokito , thanks.

I've already tested it. I was able to establish a Coudflared Tunnel but the tunnel does not start automatically upon OpenWRT start.

Is this a luci problem or the cloudflared app problem? You might need to check syslog and see what's up there.

If you're okay with it, @stokito could add your Tested-by: tag.

[stokito]

@jjpinom

but the tunnel does not start automatically upon OpenWRT start.

I don't have such problem and it's unlikely to happen. But the tunnel first tried to establish an HTTP3 connection and then fails so this may take more than 2 minutes. Maybe you faced this problem. Please check logs and create a bug report.

Anyway, this is not related to the app itself.

The PR can be merged as for me. The app allows to configure the tunnel without using a command line and this extends user base significantly.

[systemcrash]

Nice! Thank you.

[stokito]

Thank you and to you @animegasan

[stokito]

I created a support topic on a forum:
https://community.cloudflare.com/t/openwrt-support/610306
Please subscribe to it.

Also please check the Wiki page https://openwrt.org/docs/guide-user/services/vpn/cloudfare_tunnel

[1715173329]

Also please check the Wiki page https://openwrt.org/docs/guide-user/services/vpn/cloudfare_tunnel

I saw you added two sysctl configurations, if it is necessary could you please create a PR against cloudflared package? Thanks.

It can be put into /etc/sysctl.d/30-cloudflared-conf as a file:

net.ipv4.ping_group_range="0 429296729"
net.core.rmem_max=2500000

[stokito]

I don't know if it's safe to add this settings. Also increasing net/core/rmem_max may be problematic if a router lacks of memory.
A tunnel works despite the warning.

This wiki article was initially written by @oskarirauta

But I anyway wish to send a PR to remove the url: http://localhost:8000 from config.yml and to comment out everything else there because the cloudflared fails to start.

UPD openwrt/packages#23273

[stokito]

I also made a new PR to the app. Please review: #6887

[stokito]

I posted current status and issues on the CF forum https://community.cloudflare.com/t/openwrt-support/610306/3

Please join the discussion there.