01
Create a server
Give the computer a name in the dashboard. The tunnel for it is created automatically.
name: office
// tunnels to your computers, no public IP
2GC Tunnel lets you reach a computer at the office or at home over Remote Desktop (RDP) or SSH, from anywhere. No public IP, router settings or VPN. You decide who gets in.
Too Good to Change.
your machine
localhost:3389
cloudflared
public address
rdp-office.voly.codes
Set it up once, then connect in one click
// 02 — how it works
02
Add a service
Choose RDP or SSH and the port the computer listens on. Each service gets its own address.
rdp → localhost:3389
03
Install the connector once
Run one command on that computer. After that it stays online by itself, even when nobody is signed in to the dashboard.
sudo cloudflared service install ••••••
Connect from the desktop app in one click
// 03 — desktop app
01 / sign in
Paste the access token
The token signs you in to your organization. The app remembers it on this device.
02 / choose
Pick an available computer
You immediately see which servers are online and which RDP or SSH services you can use.
03 / connect
Press Connect
2GC Tunnel creates a local connection and opens Remote Desktop or your terminal automatically.
The builds are not signed yet, so the system asks you to confirm the first launch.
// 03 — every service gets its own address
rdpprotocol
-
officeserver
.
voly.codesdomain
The address is built from the protocol, the server name and your domain, for example rdp-office.your-domain. Share it with the people who need that computer.
server
office
:3389
:22
:50051
:80
cloudflared
RDP:3389
rdp-office.voly.codes
CNAME
SSH:22
ssh-office.voly.codes
CNAME
gRPC:50051
grpc-office.voly.codes
CNAME
HTTP:80
http-office.voly.codes
CNAME
// 04 — access
Each person sees only the computers they may use
Add people to your organization and put them in groups. Grant access to a whole server or to a group. Anyone without access does not even see the server.
Owner and admins
Create servers, invite people, grant access
Manage
Connector token, services and deletion of one server
View
Status, address and Connect in the desktop app
Grant access to people directly or to a whole group
Nothing is open to the internet
// 06 — security
ZTNA · Zero Trust Network Access
Access to a service, not to the whole network
When Cloudflare Access is enabled, every SSH or RDP connection is checked against the user's identity and access policy. A person gets only the authorized service; the private network stays hidden.
identity providers
Use the identity provider your team already has
Cloudflare Access can connect corporate and social sign-in, or work with open standards.
One-time PIN is available without an external provider
The connection goes out, not in
The connector makes an outgoing connection to Cloudflare. You do not change the router or the firewall.
Email sign-in for SSH and RDP
Optionally, Cloudflare Access sits in front of the server: only people you granted access can connect.
Protected sign-in
Passwords are stored only as hashes, guessing is rate-limited, and every form is protected against forged requests.
Live status
The dashboard shows whether a server is online and refreshes it on its own while the tab is open.
Set up your first computer today
Create organization
Up to 3 servers per organization to start