← Workers Vpc / workers-vpc / configuration / tunnel

Hardware requirements

For production use cases, we recommend the following baseline configuration:

• Run a cloudflared replica on two dedicated host machines per network location. Using two hosts enables server-side redundancy. See tunnel availability and replicas for setup instructions.
• Size each host with minimum 4GB of RAM and 4 CPU cores.

This setup is usually sufficient to handle traffic from small-medium sized applications. The actual amount of resources used by cloudflared will depend on many variables, including the number of requests per second, bandwidth, network path, and hardware. If usage increases beyond your existing tunnel capacity, you can scale your tunnel by increasing the hardware allocated to the cloudflared hosts.

To estimate tunnel capacity requirements for your deployment, refer to the tunnel capacity calculator in the Zero Trust documentation.

Monitor tunnel performance and scale accordingly:

• CPU utilization: Keep below 70% average usage
• Memory usage: Maintain headroom for traffic spikes
• Network bandwidth: Ensure adequate throughput for peak loads
• Connection count: Scale cloudflared vertically when approaching capacity limits

• Configure tunnel deployment
• Set up high availability with multiple replicas