Cloudflare One: Connect a private hostname

[MAH69IK]

Existing documentation URL(s)

• https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/cloudflared/connect-private-hostname/#2-connect-the-dns-server-to-cloudflare

What changes are you suggesting?

The section “Connect the DNS server to Cloudflare” describes how to route traffic to the internal DNS via Tunnel. However, it is not clear from the documentation how to specify that the IP for which the CIDR Route is created is the DNS IP, and not just some internal IP.

Additional information

No response

[nikitacano]

You only need CIDR route if you are going to send DNS traffic via a different tunnel, which is explained in step 3 on the same page: https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/cloudflared/connect-private-hostname/#3-optional-create-a-resolver-policy.

Otherwise, all you need is a hostname route and to make your own internal DNS server the primary resolver on your host machine. Once this is done, cloudflared will send DNS query to the DNS resolver configured on the host machine automatically in order to route traffic. This is explained in more details in the blog post at https://blog.cloudflare.com/tunnel-hostname-routing/.