Both Tailscale Funnel and Cloudflare Tunnels solve the same problem — getting public traffic to a service behind NAT without forwarding a port — but they make opposite architectural bets. A deep dive on the data planes, who terminates your TLS, the identity models, the real limits, and which one to actually reach for.
Tunnels
-
Tailscale Funnel vs Cloudflare Tunnels: Two Ways to Expose a Service Through NAT -
Cloudflare Tunnels for Secure Homelab Exposure How Cloudflare Tunnels work, setting up cloudflared for zero-port-forward homelab access, Cloudflare Access for authentication, configuration via YAML and the dashboard, and an honest look at the privacy tradeoffs and free tier limits.