How to Install Cloudflare on Your VPS

Cloudflare is one of the most widely used tools for improving website security, performance, and reliability. If you're running a VPS (Virtual Private Server), integrating Cloudflare isn't about installing software on the server itself — it's about routing your domain's traffic through Cloudflare's global network. Understanding exactly what that means, and how to do it, clears up a lot of confusion.

What "Installing Cloudflare" Actually Means

Cloudflare doesn't run as a traditional application on your VPS. Instead, it sits between your visitors and your server as a reverse proxy. When someone visits your domain, their request hits Cloudflare's network first. Cloudflare then forwards it to your VPS, returns the response, and handles caching, DDoS filtering, SSL termination, and more along the way.

This means the setup happens at the DNS level, not at the server level — at least for the core product. You point your domain's nameservers to Cloudflare, and Cloudflare becomes the authoritative DNS provider for that domain.

There are two distinct integration paths worth knowing:

• Cloudflare DNS proxy (the standard setup): Your domain routes through Cloudflare's network. Your VPS IP is hidden behind Cloudflare's IP addresses.
• Cloudflare Tunnel (formerly Argo Tunnel): A lightweight daemon (cloudflared) runs on your VPS and creates an outbound connection to Cloudflare. No open inbound ports required.

Step-by-Step: Standard Cloudflare Setup via DNS

This is the most common approach and works for nearly any VPS running a web server (Nginx, Apache, Caddy, etc.).

1. Create a Cloudflare Account and Add Your Domain

Sign up at cloudflare.com, then click Add a Site and enter your domain name. Cloudflare will scan your existing DNS records automatically.

2. Review and Confirm DNS Records

Cloudflare imports your current DNS records. Check that your A record (which points your domain to your VPS IP address) is present and correct. You'll see an orange cloud icon next to records — this means traffic for that record is proxied through Cloudflare. A grey cloud means DNS-only (no proxy).

3. Change Your Domain's Nameservers

Cloudflare will provide two custom nameservers (e.g., ns1.cloudflare.com, ns2.cloudflare.com). Log into your domain registrar (wherever you bought your domain — GoDaddy, Namecheap, Google Domains, etc.) and replace the existing nameservers with the ones Cloudflare provides.

DNS propagation typically takes anywhere from a few minutes to 48 hours, though it's usually much faster.

4. Verify Activation

Back in the Cloudflare dashboard, your site status will change to Active once propagation is complete. At this point, traffic to your domain routes through Cloudflare before reaching your VPS.

Setting Up Cloudflare Tunnel on a VPS 🔧

If you want a Cloudflare Tunnel — useful when your VPS is behind a firewall, doesn't have a public IP, or you want to avoid exposing ports — the process involves running a daemon on the server itself.

Install the cloudflared Daemon

On a Debian/Ubuntu VPS: