Hi @Ivan_Sabelnikov - Welcome to the community
I’m running mongo in private network. It’s hidden from public internet.
Based off the details of the post and the
replicaSet value, I presume you are referring to an Atlas cluster. When you state that it is hidden from the public internet, do you mean that you have configured Network Peering Connection?
I’m trying to proxy traffic through Cloudflare tcp tunnel .
I’m not too familiar with the Cloudflare TCP tunnel you’ve linked but based off the same documentation page, more specifically the requirements:
- A Cloudflare account
- A site active on Cloudflare
cloudflared daemon installed on the host and client machines
The third requirement is for the cloudflared daemon to be installed on both the host and client machines. If the host machine (or client machine) is to be the Atlas nodes then this won’t be possible.
If I open atlas to the internet the proxied connection string above works correctly. But I want to avoid public access.
Can you clarify what you mean by opening atlas to the internet? Do you mean adding the CIDR
0.0.0.0/0 to your Network Access List so that it allows access from anywhere?
Perhaps setting either of the following may suit your use case:
Atlas is secure by default as communications are encrypted using TLS and has IP access list capabilities which limits exposure of the Atlas endpoints to certain IP’s which user’s control. You may find the Atlas Security page useful as it includes much more detailed information regarding Atlas Security. On the page, you’ll also be able to download the Atlas Security Controls white paper.