davepoon/cf-proxy
plugins/all-skills/skills/cf-proxy/SKILL.md
Deploy a free VLESS proxy/VPN node on Cloudflare Pages using edgetunnel. Automates code download, UUID generation, Pages deployment, free domain registration (DNSExit), DNS configuration, custom domain binding, and client setup for Shadowrocket/v2rayN/Clash. Uses Cloudflare Pages (not Workers) because Pages supports CNAME-based custom domains from any DNS provider, avoiding the need to host DNS on Cloudflare.
$ install --global
skillsauthnpx skillsauth add davepoon/buildwithclaude cf-proxyInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jun 4, 2026, 3:31 AM110.3s1 file scanned
SKILL.md
- name:
- cf-proxy
- category:
- devops
- description:
- Deploy a free VLESS proxy/VPN node on Cloudflare Pages using edgetunnel. Automates code download, UUID generation, Pages deployment, free domain registration (DNSExit), DNS configuration, custom domain binding, and client setup for Shadowrocket/v2rayN/Clash. Uses Cloudflare Pages (not Workers) because Pages supports CNAME-based custom domains from any DNS provider, avoiding the need to host DNS on Cloudflare.
Cloudflare Proxy (cf-proxy)
Deploy a free VLESS proxy node on Cloudflare Pages + edgetunnel, with WebSocket over TLS through Cloudflare's global CDN.
When to Use This Skill
- Setting up a free proxy/VPN node on Cloudflare
- Deploying edgetunnel to Cloudflare Workers or Pages
- Building a VLESS/Trojan/Shadowsocks proxy on Cloudflare's free tier
- Configuring a custom domain for a Cloudflare proxy to bypass SNI blocking
- Managing, updating, or troubleshooting an existing Cloudflare proxy node
- Registering a free domain for proxy use
What This Skill Does
- Downloads edgetunnel — fetches the worker code from GitHub (cmliu/edgetunnel, 30k+ stars)
- Generates credentials — creates UUID for VLESS authentication and admin password
- Deploys to Cloudflare Pages — not Workers, because Pages supports CNAME-based custom domains
- Registers a free domain — via DNSExit (free 2-year second-level domains like
*.linkpc.net) - Configures DNS — creates CNAME record pointing subdomain to
*.pages.dev - Binds custom domain — attaches the domain to the Cloudflare Pages project
- Verifies and configures — tests the node and provides client configuration
How to Use
Basic Usage
Help me set up a free Cloudflare proxy node
/cf-proxy
With Specific Requirements
Deploy a VLESS proxy on Cloudflare using my domain example.com
Fix my Cloudflare proxy — Shadowrocket can't connect
Architecture
Client (Shadowrocket / v2rayN / Clash)
↓ VLESS over WebSocket over TLS (port 443)
Custom Domain (CNAME → *.pages.dev)
↓
Cloudflare CDN (global edge)
↓
Cloudflare Pages Function (edgetunnel _worker.js)
↓ TCP outbound
Target Website
Why Pages Instead of Workers?
workers.devdomains are blocked at the TLS SNI layer by some firewalls- Workers custom domains require DNS hosted on Cloudflare — not viable for free domains
- Pages supports CNAME-based custom domains from any DNS provider — the key advantage
Cloudflare Free Tier Limits
| Resource | Free Quota | Impact on Proxy | |----------|-----------|----------------| | Requests | 100,000/day | WebSocket connection = 1 request; messages free | | Bandwidth | Unlimited | No egress fees — biggest advantage | | CPU time | 10 ms/request | Proxy is I/O-bound, typically <3ms | | Memory | 128 MB/isolate | Sufficient |
Known Limitations
- No UDP — only TCP over WebSocket; cannot proxy games, VoIP
- Speed varies — 5-50 Mbps depending on CDN routing; not for low-latency use
- 100K daily request cap — sufficient for daily browsing; heavy use may hit limit
- Custom domain SNI may be blocked — domain rotation may be needed
Example
User: "帮我搭建一个 Cloudflare 代理节点"
Output: Skill walks through the full 7-phase setup interactively — collecting Cloudflare credentials, generating config, deploying to Pages, registering a free domain if needed, configuring DNS, binding the custom domain, and providing the final VLESS connection URI for the user's proxy client.
Tips
- Always use a subdomain for CNAME records (e.g.,
vless.example.com), never the root domain — a root CNAME destroys the zone's SOA/NS records - The admin panel at
https://your-domain/<admin-password>provides ready-to-scan QR codes for mobile clients - If speed is insufficient, try different Cloudflare CDN IP addresses as the proxy endpoint
- Keep usage low-profile for personal use to avoid Cloudflare ToS issues
Requirements
- Node.js 18+
- GitHub CLI (
gh) - Cloudflare account (free tier)
- A domain (free via DNSExit, or bring your own)
Source
- GitHub: https://github.com/LewisLiu007/cf-proxy
- Install:
npx skills add LewisLiu007/cf-proxy
Related Skills
davepoon/whats-next
tools
VerifiedTrustedCommunity
Assesses the current state of the startup project and recommends what to focus on next. Use when there is a need or a question from the user to understand what the next steps are or what to focus on next.
3,021SKILL.mdUpdated Jun 5, 2026
davepoon/using-startup-superpowers
data-ai
VerifiedTrustedCommunity
Use at the start of any conversation about a startup idea, product validation, founder strategy, or work inside a `startup/` workspace. Establishes file conventions, voice-input handling, subagent dispatch rules, and how to update each artifact safely. Activate before invoking any other startup-superpowers skill.
3,021SKILL.mdUpdated Jun 5, 2026
davepoon/surveys
tools
VerifiedTrustedCommunity
Manages the founder's survey-based validation — crafting the right questions, deploying a survey to the internet, and analyzing results against hypotheses. Use when the founder wants to run a survey, create survey questions, validate hypotheses at scale, check how a survey is going, understand whether a survey is the right tool right now, or deploy a question set to get quantitative signal. Also bring this up if you believe that creating a survey to collect quantitative evidence may be useful at this point.
3,021SKILL.mdUpdated Jun 5, 2026
davepoon/mvp
development
VerifiedTrustedCommunity
Guides the founder through designing and optionally building the simplest MVP or prototype that validates their current hypotheses. Use when the founder wants to build something to test assumptions, discusses what to build next, wants to interpret results from a live MVP, or is deciding whether the current approach is still right. Also use when a founder proposes something to build — the skill will check whether the proposed form is the simplest thing that generates honest signal.
3,021SKILL.mdUpdated Jun 5, 2026