---
title: Running the Tines Tunnel using Docker
url: https://www.tines.com/docs/admin/tunnel/deploying-the-tunnel-on-docker-compose/
updated: 2025-05-28T08:53:00+00:00
---

*[tines.com](https://www.tines.com/llms.txt) › [Docs](https://www.tines.com/llms.txt) › [Admin](https://www.tines.com/llm/docs/admin.md) › [Tunnel](https://www.tines.com/llm/docs/admin/tunnel.md)*

# Running the Tines Tunnel using Docker

*[View on tines.com](https://www.tines.com/docs/admin/tunnel/deploying-the-tunnel-on-docker-compose/)*

## Deploying Tunnel

The Tunnel container can be run with Docker using the example below or similarly with other container orchestration platforms.

```bash
docker run \
  --env TINES_TUNNEL_SECRET="secret" \
  tines/tines-tunnel:latest
```

The Tunnel service will utilize the routing and DNS services of the host it is deployed on.

## Using Tunnel

HTTP Requests can be sent through the Tunnel by utilizing the *"Use tunnel"* parameter in the configuration of a HTTP Request Action.

![](https://www.datocms-assets.com/55802/1656002731-admin_tunnel_configuration-4790132adf7240ea2b9b5c635f0bf543.png)

## Connectivity Requirements

Tunnel uses [Cloudflare Tunnels](https://developers.cloudflare.com/cloudflare-one/connections/connect-apps) and requires connectivity to Cloudflare to function properly.

No inbound connectivity to the container is required by Tines from the internet or elsewhere. The container will attempt to form a connection with the services below from its deployment location.

| DESTINATION | PORT | PROTOCOLS | DIRECTION | Purpose |
| --- | --- | --- | --- | --- |
| [region1.v2.argotunnel.com](https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/deploy-tunnels/tunnel-with-firewall/#required-for-tunnel-operation) | 443,7844 | TCP/HTTPS | Outbound | Establishes a secure tunnel for outbound connections to Cloudflare's network. |
| [region2.v2.argotunnel.com](https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/deploy-tunnels/tunnel-with-firewall/#required-for-tunnel-operation) | 443,7844 | TCP/HTTPS | Outbound | Establishes a secure tunnel for outbound connections to Cloudflare's network. |
| [api.cloudflare.com](https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/deploy-tunnels/tunnel-with-firewall/#optional) | 443,7844 | TCP/HTTPS | Outbound | Accesses Cloudflare's API for management tasks (not required for core functionality). |
| [update.argotunnel.com](https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/deploy-tunnels/tunnel-with-firewall/#optional) | 443,7844 | TCP/HTTPS | Outbound | Checks and downloads updates for the Argo Tunnel service. |
| [<your-tunnel-name>-<your-tenant-name>.tines-tunnel.com](tines-tunnel.com) | 443,7844 | TCP/HTTPS | Outbound | Facilitates secure, outbound-only connections to Tines services. |
| [registry.hub.docker.com](https://registry.hub.docker.com/r/tines/tines-tunnel) | 443,7844 | TCP/HTTPS | Outbound | Required to pull the Tines Tunnel image from Docker Hub. |

> **INFO:** The requirements listed here apply to your firewall configuration so ensure these outbound connections are allowed.

For more information, see Cloudflare's documentation [here](https://developers.cloudflare.com/cloudflare-one/connections/connect-apps/do-more-with-tunnels/ports-and-ips/).
