LoginSign Up
← Back to all sparks
C

Cloudflare Tunnel

INFRA · APIS
Velocity5.0

Daemon that creates secure outbound-only tunnels to Cloudflare

developers.cloudflare.com/cloudflare-one/connections/connect-networks ↗

cloudflared's release feed is checksums and nothing else — until a release has to warn you off itself.

cloudflare-tunnelrelease-checksumsregressionnetworkingdistribution
◆Current state
The tunnel daemon ships on a calendar-versioned cadence, roughly two to four releases a month. Nine of the last ten release bodies contain only SHA256 checksums for the packaged binaries across amd64, arm64, 386, arm, FIPS Linux and the macOS and Debian/RPM packages; no changelog text accompanies them. Whatever changed in a given version is not discoverable from this feed.
◆Where it's heading
The publishing pattern is stable and unlikely to change: release notes live elsewhere, and the feed functions as a distribution manifest. The one exception in this window is instructive — 2026.8.0 was amended after the fact to carry a known-issue warning, which is why it now carries a later timestamp than the 2026.8.1 release that superseded it. That is the only mechanism by which this feed communicates anything: a release gets edited when it turns out to be unsafe to run.
◆Prediction
Expect continued checksum-only releases every two to three weeks, with substantive text appearing only when another regression forces a retroactive warning.

◆Recent moves

  1. 4d ago

    2026.8.2

    A checksum-only release with no accompanying notes, following two days after the 2026.8.0 trailing-slash regression and its 2026.8.1 replacement. Nothing in the body indicates what changed.

    View source ↗
  2. 5d ago

    2026.8.0 pulled: trailing-slash stripping breaks WordPress origins

    The only release in this window carrying real text, and it is a retraction: this version strips trailing slashes from requests to HTTP origins, causing redirect loops for applications that need canonical trailing-slash URLs. The warning directs operators to 2026.8.1 or later and was clearly appended after the fact, which is why this entry is stamped later than the release that replaced it.

    View source ↗
  3. 5d ago

    2026.8.1

    The release that resolves the 2026.8.0 trailing-slash regression, though its own body is checksums only. Operators learn its significance from the warning attached to the release it supersedes, not from this entry.

    View source ↗
  4. 27d ago

    2026.7.3

    Checksum-only release with no changelog text. Consistent with the feed's standard publishing pattern.

    View source ↗
  5. 1mo ago

    2026.7.2

    Checksum-only release, one of three shipped within eight days in July. Cadence is visible from this feed; content is not.

    View source ↗
  6. 1mo ago

    2026.7.1

    Checksum-only release published a day after 2026.7.0, a spacing that usually indicates a quick follow-up fix. The body offers no confirmation either way.

    View source ↗