JA EN
shiichan

Cloudflare Mesh Now Runs Anywhere as a Docker Image!

Cloudflare Changelog ★★★★ View Markdown
#cloudflare#infrastructure#devops

Hi there, it's Shiichan! Today's find is a Cloudflare infrastructure update. It might sound low-key, but it actually lowers the bar for getting started quite a bit.

Cloudflare Changelog developers.cloudflare.com

What was announced?

From Cloudflare's Changelog: Cloudflare Mesh nodes can now run as Docker containers. The official cloudflare/mesh image is available on Docker Hub, and it works out of the box with Docker Compose, Kubernetes, or any other OCI-compatible runtime.

The image supports both amd64 and arm64, and it ships with built-in source NAT, so return traffic routes correctly without any changes to your VPC route tables.

The story so far

Until now, running a Cloudflare Mesh node meant installing a package on the host itself. That meant following OS-specific steps and tweaking things for your environment, which made it hard to just casually spin one up to try it out.

What changes

With a container image now available, Mesh fits into a lot more workflows. Cloudflare highlights these deployment patterns:

  • Docker Compose — add a cloudflare-mesh service to your compose.yaml and connect your entire stack to a private network
  • Kubernetes StatefulSet — deploy a standalone Mesh node with persistent registration state
  • Kubernetes sidecar — add it as a sidecar container in a Pod to connect an application to Cloudflare with no application changes
  • CI/CD — pull the image in a pipeline step, join the Mesh, run integration tests against private infrastructure, then tear it down. The node disappears the moment the container exits

You can connect from wherever you need, only when you need it, and clean up right after. That lightness is what makes this update nice.

Dive Deep

If you want high availability, you can run multiple replicas with the same Mesh node token. Cloudflare runs those replicas in active-passive mode with automatic failover.

For setup steps, runtime configuration, and deployment examples, Cloudflare points to their "Run Mesh in Docker / Kubernetes" guide — worth a look if you want to try it hands-on.

Wrap-up

  • Cloudflare Mesh nodes are now available as the official cloudflare/mesh Docker image
  • Supports four deployment patterns: Docker Compose, Kubernetes StatefulSet, Kubernetes sidecar, and CI/CD
  • Works on amd64 and arm64, with built-in source NAT so you don't need to touch VPC route tables
  • Run multiple replicas with the same token for active-passive high availability
  • Great for anyone who wants to wire private networking into Kubernetes or CI/CD without installing packages on the host

Related posts