Julien iaace-NA

Cloudflare WARP tunnel via Wireguard client

This example provides a simple configuration for a Debian client to have a Cloudflare tunnel while not installing the official Cloudflare WARP client. Note: Tunnel transport outbound to engage.cloudlflare.com on udp/2408 is default, with a dynamic listening udp port and a fwmark for packet matching by wireguard. Any applicable firewall rules may need to be adjusted.

Top-level GitHub project to convert cloudflare endpoint to generic wireguard configuration file: https://github.com/ViRb3/wgcf

Install dependancies

sudo apt install openresolv wireguard-tools golang git

Get the latest client from Github and build using go

git clone https://github.com/ViRb3/wgcf.git

	IDrive e2 - $0.005/GB - $0 for download bandwidth - 1:3 upload:download ratio allowed <- questionable data privacy - custom domains offered - has audit logging - supports event notifications with AWS SQS - $0.01/GB overage on bandwidth - has replication
	Backblaze B2 - $0.006/GB - $0 for download bandwidth if through Worker (or $0.01/GB past a 1:3 upload:download ratio) <- decent data privacy record - no custom domains - has audit logging - has replication
	Vultr - $0.018/GB - $0.01/GB for download <- https://www.vultr.com/products/object-storage/#pricing
	Wasabi - $0.0069/GB - $0 for download bandwidth - 1:1 and billed for 90 days <- has audit logging - no custom domains - min object size billed at 4 kilobytes
	Storj - $0.004/GB - $0.007/GB for download <- not good for small files due to segment pricing
	Scaleway - $0.013/GB - $0.011/GB for download <- estimate, had to do EUR to USD conversion https://www.scaleway.com/en/pricing/storage/
	Cloudflare R2 - $0.015/GB - $0.00/GB