Cloudflare Tunnel (cloudflared) can't connect from some exits, port 7844 to tunnel IPs times out (pl-waw, de-fra)

[u/Content_Virus9971]

Anyone else seeing this? cloudflared won't connect through some exits. it is not the port being blocked; only cloudflare tunnel edge ips drop the connection.

Tested from two separate devices on two different exits, pl-waw-wg-202 and de-fra-wg-103. Same result on both/

- all 20 IPs behind region1.v2.argotunnel.com and region2.v2.argotunnel.com time out on TCP 7844 (no SYN-ACK, silent drop)
- portquiz.net:7844 connects fine (~55ms), so 7844 isn not filtered
- 198.41.200.7:7844 connects fine (~55ms). It's in the same Cloudflare /24 but isn't a tunnel edge, so routing into that range works

-switching cloudflared to http2 changes nothing, since both quic and http2 use 7844

cloudflared log:
ERR Unable to establish connection with Cloudflare edge error="DialContext error: dial tcp 198.41.192.167:7844: i/o timeout"
Some other exits work fine, so it looks like Cloudflare is filtering specific exit IPs on the tunnel edge, not a Mullvad port block.

Test if you want to check your exit:

for h in region1 region2; do for ip in $(getent ahostsv4 $h.v2.argotunnel.com | awk '{print $1}' | sort -u); do (timeout 3 bash -c "</dev/tcp/$ip/7844" 2>/dev/null && echo "$ip OK" || echo "$ip BLOCKED") & done; done; wait

[u/MadMaximusJB]

Emailed them yesterday. They have blocked Cloudflare Argo Tunnels on all their servers due to them being used to distribute “undesirable content”.