Feature request: add CloudFlare tunnel

[tpjanssen]

Important notices

Before you add a new report, we ask you kindly to acknowledge the following:

• I have read the contributing guide lines at https://github.com/opnsense/core/blob/master/CONTRIBUTING.md
• I am convinced that my issue is new after having checked both open and closed issues at https://github.com/opnsense/core/issues?q=is%3Aissue

Is your feature request related to a problem? Please describe.

Currenty there is no way to connect to a CloudFlare tunnel. This function is definitely an added value for systems connected to the internet by means of CGNAT.

Describe the solution you like

A function to setup and manage a CloudFlare tunnel through the web interface.

Describe alternatives you considered

It is possible to do this on the CLI (by installing cloudflared manually), but this is not preferable.

Additional context

N/A

[sopex]

Why expose the interface to the internet? Even behind a cloudflare tunnel...? Use a VPN, if you want an easy to setup option use Netbird or Tailscale.

Use the CLI if you really need it and know what you are doing but there is no reason in my mind to promote this by giving it an app.

[tpjanssen]

How is a VPN helpful in your opinion? If your WAN is behind CGNAT your WAN IP shared with lots of other clients, so it's impossible to contact any service running on your WAN IP. That's exactly where a Cloudflare tunnel comes in...

[sopex]

Both Netbird and Tailscale, along with others, work behind a cg-nat. Give them a try, they are both free for a very generous amount of devices.

[bms]

Last I looked cloudflared was relying on WebSockets for its tunnel encap, so head-of-line blocking is a distinct possibility.