WAF Thorngate: A Tiny Go WAF That Guards Your Cloudflare Tunnel Thorngate is a zero-dependency Go reverse-proxy WAF behind a Cloudflare Tunnel that honeypots scanners into a persistent blacklist before they reach your apps.
K3s How to Set Up Cloudflare Tunnels for k3s Without MetalLB Expose k3s services securely with Cloudflare Tunnels instead of MetalLB. Deploy the cloudflared agent as a pod and map a public hostname to your service.