WAF Thorngate: A Tiny Go WAF That Guards Your Cloudflare Tunnel Thorngate is a zero-dependency Go WAF for Cloudflare Tunnels: honeypots, IPv6 /64 bans, weeks of searchable request history and an admin portal to manage it.