Antcas Tunnel

With the Antcas Tunnel, end customers can set up a simple and secure remote access. The service is available free of charge for all licensed servers. Alternatively, in Antcas Control, you can also configure and manage your own Cloudflare Tunnel.

Configuration

The configuration of the tunnel is fully automated. The setup can be done both in the Project Management and in the Project Configurator, similar to assigning communication ports. After selecting a randomly generated address, it may take a few moments for the visualization to be accessible via the tunnel. Before activation, the current version of the Cloudflare Tunnel service is automatically downloaded and installed on the server. The configuration is then created and activated automatically.

Note: The availability of the service cannot be guaranteed as it is based on Cloudflare's infrastructure and thus depends on their availability. It is therefore recommended to set up local access in addition to the Antcas Tunnel. For this purpose, for example, the local SSL certificate can be used. This ensures that access remains possible even if the tunnel service is temporarily unavailable.

If the use of the Antcas Tunnel is not permitted or desired, it can be deactivated under Infrastructure ▸ Network ▸ Remote Access ▸ Advanced. The addresses already generated as well as the associated configurations are not deleted and remain unchanged after reactivation.

Prerequisites

The server requires a connection to Cloudflare and to the Antcas Hub for setup and operation. If no connection is made to the Antcas Hub within 90 days, the tunnel settings are automatically removed. The connection can also be established via an HTTP proxy or a SOCKS5 proxy if needed.

If the server is behind a restrictive firewall, it must be ensured that outgoing connections to Cloudflare are possible. In particular, TCP and UDP port 7844 must be open. For more information, see:
https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-tunnel/troubleshoot-tunnels/connectivity-prechecks/

Please also note the terms of use of Cloudflare:

• https://www.cloudflare.com/website-terms/
• https://www.cloudflare.com/service-specific-terms-overview/

VoIP Telephony

After the initial setup of the tunnel, the VoIP connection may already work if the endpoint is in the same network as the server. However, if you try to establish the connection from outside the local network, the connection attempt usually fails unless additional configuration has been performed.

For reliable operation of VoIP telephony, a STUN or TURN Server must be configured. When using a STUN server, additional firewall or port forwarding rules may be required depending on the network environment. A TURN server, on the other hand, enables connection establishment even without port forwarding and is therefore recommended for most installations via Antcas Tunnel.