• Arcane login procedure
  • that doesn’t support 2FA
  • that prompts you to change your (randomly generated, high entry, kept in a password manager) password, even though the NIST has recommended against this practice for many years
  • which fails to actually log you out (!) – discovered this when I was trying to verify that my updated password worked
• Machine console sometimes work and sometimes doesn’t
• Arcane procedure to attach disks to VMs (to be fair: they show the commands in a popup window)
  • And even with these commands one can’t switch the boot disk of a given VM

They have a generous amount of free credit, but I wouldn’t recommend them for production use.

Trying to set up CloudFlare Access and it seems that some information are hard to find:

• The tunnel communicates over 7844/udp (important in case you want/have a restrictive firewall and/or your cloud provider requires to configure the node-independent firewall)
• The authenticated user is specified by the Cf-Access-Authenticated-User-Email header. Other useful headers can be Cf-Connecting-Ip or Cf-Ipcountry.
• To link the authentication with the tunnel you desire, simply configure the “Self-hosted application” on the same (sub)domain as the tunnel.