Guides

Cloudflare Tunnel

How VMSC uses Cloudflare Tunnels to expose your overlays over HTTPS without port forwarding.

What Is a Cloudflare Tunnel?

A Cloudflare Tunnel creates an encrypted connection between your computer and Cloudflare's global network. Instead of opening ports on your router or configuring firewall rules, the tunnel reaches out from your machine to Cloudflare, and Cloudflare serves your content to the internet over HTTPS.

This means anyone with the URL can view your overlay — including streaming software like TikTok LIVE Studio that requires HTTPS — without you needing to touch your network settings.

How VMSC Provisions Tunnels

VMSC handles the entire tunnel lifecycle automatically. When you click Get HTTPS URL in Settings, the following happens behind the scenes:

  1. Registration

    VMSC contacts the Vryionic Gatekeeper server with your license credentials. The server verifies your Premium subscription and registers a tunnel for your account.

  2. Cloudflared Launch

    VMSC starts a bundled copy of cloudflared (the Cloudflare Tunnel client) in the background. This process establishes an outbound-only connection to Cloudflare's edge network.

  3. DNS Configuration

    The Gatekeeper server creates a DNS record pointing your unique subdomain to the tunnel. This step is automatic and requires no manual DNS changes.

  4. Ready

    Within a few seconds, your overlay is accessible over HTTPS. VMSC displays the URL and status in the Settings panel.

You do not need a Cloudflare account, API key, or any external configuration. VMSC manages everything through the Gatekeeper server.

Your Unique URL

Each Premium user is assigned a permanent subdomain based on their user ID:

https://overlay-<userId>.vryionic.com

This URL is tied to your account and never changes, even if you reinstall VMSC, switch computers, or reactivate your subscription. This means you only need to configure it once in your streaming software.

Permanent URL

Your tunnel URL is stable across sessions. Bookmark it, save it in your streaming software, and share it with co-streamers — it will always point to your active overlay server when VMSC is running.

How It Works

The data flow from VMSC to the viewer's browser follows this path:

Connection Flow

VMSC Overlay Server (localhost:7890) → cloudflared (outbound tunnel) → Cloudflare Edge (HTTPS termination) → Browser / TikTok LIVE Studio

All traffic between cloudflared and Cloudflare is encrypted. The browser receives a valid HTTPS certificate issued by Cloudflare, so there are no security warnings or mixed content issues.

Because the tunnel is outbound-only, no incoming ports need to be opened on your router. Your local network remains unexposed.

Requirements

Requirement Details
License Premium subscription (active Patreon membership)
Internet Stable broadband connection — the tunnel needs to stay connected while streaming
VMSC Must be running with the overlay server active
Internet Required

If your internet connection drops, the tunnel disconnects and the HTTPS URL becomes unreachable. Your overlay will resume automatically once connectivity is restored and VMSC reconnects the tunnel.

Disabling the Tunnel

If you do not need HTTPS access, you can leave the tunnel disabled. VMSC will not start cloudflared unless you explicitly request an HTTPS URL. Local overlays over http://localhost continue to work independently of the tunnel.

To stop an active tunnel, go to Settings > Stream Overlay and click Disconnect Tunnel. The tunnel will shut down immediately.