Nikita Cano

Tunnel and Mesh @cloudflare

[Nikita Cano @pheoru]

@just_be_dev @elithrar @CloudflareDev @__jesse_li hey Justin, thanks for the detailed writeup!

Workers VPC, Tunnel, and Mesh all cover runtime connectivity, but the build container is isolated and can't reach private networks or Access-protected endpoints just yet.

will keep you in the loop as we dig into this.

[rita kozlov 🐀 @ritakozlov]

BIG DAY! @voidzerodev is joining @cloudflare 🚀

before anything else: @vite_js is very much remaining open source, and will always remain that way, with robust ongoing investment

we're also going to keep making cloudflare the best place for building applications!

thrilled to have @evanyou and team join us to help us on that mission.

https://t.co/OndkduVZRc

[Ashley Peacock @_ashleypeacock]

Cloudflare Sandboxes 🤝 Cloudflare Tunnel

You can now expose a service running inside a Cloudflare Sandbox using a Cloudflare Tunnel

Both quick tunnels and named tunnels are supported

[Nikita Cano @pheoru]

Tunnel started as a way to expose a web server without opening firewall ports.

in 2026 it's becoming the connectivity primitive for the agent platform stack: https://t.co/xOVwWFVk6m

[Nikita Cano @pheoru]

Sandboxes now expose internal services through Cloudflare Tunnel with one function call.

sandbox.tunnels.get(8080) → public URL.

agents that need to share what they're running just got a one-liner.

[Nikita Cano @pheoru]

it's also the latest in a quiet 2026 trajectory:
Feb — Tunnel in the main Cloudflare Dashboard
Mar — wrangler tunnel commands
May — press t in wrangler dev or vite dev to share localhost
Today — sandbox.tunnels.get(port) for agent runtimes

[Confidence @megaconfidence]

Your localhost just got a public url!

Sharing your local dev sessions is now super easy in Wrangler or the Cloudflare Vite plugin. Just press T to create a tunnel, you get a public url with no config needed

There's also an option to use your custom domains to create tunnels for free. Available in Wrangler and Vite plugin now

[Nikita Cano @pheoru]

Cloudflare Mesh HA nodes now have full replica management in the dashboard.

See which replica is active, each replica's Mesh IP, colo, origin IP + more. Switch between replicas with tabs. Promote a passive replica to active with one click.

Check it out: https://t.co/SFxJSS36oh

[Nikita Cano @pheoru]

@Checkm3out @dok2001 Thank you for your report and patience, ANC is now re-routed while the root cause is being fixed: https://t.co/4G1HK5ByGL. Our networking and Tunnel teams are also looking into improving the internal systems that could detect and fully mitigate this kind of issues automatically.

[Nikita Cano @pheoru]

read more: https://t.co/JEEoQT84RM

[Nikita Cano @pheoru]

my favorite kind of feature is the one that deletes a documentation page from your workflow.

Cloudflare Tunnel (cloudflared 2026.5.2+) now runs the entire connectivity pre-check suite at startup. no more manual dig and netcat from a troubleshooting guide.

[Kristian Freeman @kristianfreeman]

we relaunched @cloudflare's startups website and made the review process much faster.

https://t.co/OHLy9BM7zK

up to $350k in credits. apply plz, it's time to build

[Nikita Cano @pheoru]

Try it at Manage Account → Members → Invite Members: https://t.co/3MSFHCHyUk

[Nikita Cano @pheoru]

Today we shipped granular RBAC for Cloudflare Tunnel and Cloudflare Mesh.
You can scope a role to one specific Tunnel instance or Mesh node instead of the whole account.
No more giving someone full admin just to let them stream logs on one Tunnel.

[Nikita Cano @pheoru]

Listing endpoints are now authz-aware too:
GET /cfd_tunnel and GET /warp_connector only return the resources your token / user can actually read.
So your CI script with a scoped token doesn't see the rest of your account. Cleaner, safer, less footgun.

[Nikita Cano @pheoru]

One Worker binding. Your entire private network.

Yes — IPsec, GRE and CNI too: https://t.co/UeQuiF9oBs

[Nikita Cano @pheoru]

@AnthropicAI exciting to see Cloudflare Tunnel becoming the connectivity layer for AI agents reaching private databases, internal APIs, and knowledge bases. read more: https://t.co/LGi5N4Qlmk

[Nikita Cano @pheoru]

@AnthropicAI just launched MCP tunnels for Claude Managed Agents. The networking layer underneath? Cloudflare Tunnel.
AI agents can now securely reach MCP servers inside your private network — no inbound firewall rules, no public endpoints. Outbound-only, post-quantum encrypted.

[Nikita Cano @pheoru]

@AnthropicAI the trust model is worth reading — Anthropic published the full security breakdown:
• outer mTLS between Anthropic and the transport layer
• inner TLS from Anthropic to your proxy (Cloudflare can't decrypt)
• OAuth on each MCP server
https://t.co/EmYbP2z23a