Py-KMS with Cloudflare Tunnel ?

[ProTechEx]

Hey there,

I just deploy py-kms:python3-next container on my Raspberry-PI 4 on my Homelab with:

docker run -d --name py-kms:python3-next --restart always -p 1688:1688 -p 8080:8080 -v /etc/localtime:/etc/localtime:ro ghcr.io/py-kms-organization/py-kms:python3-next

The Pi has the static local ip 10.10.10.4

I just add a Cloudflare Tunnel to get accesss from outside throught my subdomain like: kms.mydomain.com
I add as the local Service the Pi IP and the PY-KMS Port, like: http://10.10.10.4:1688 and as well with tcp://10.10.10.4:1688 to get proxied kms.mydomain.com > 10.10.10.4:1688

The Office activations does work fine with local IP, but unfortunatelly it doesn't work throught the kms.mydomain.com.

Any ideas ?

[didotb]

Security implications from making it available publicly aside; although KMS Activation uses TCP to activate clients, I don't think it can decode HTTP protocol so when it reaches the server, the server simply sees garbage data. Nevermind that crossed out part, I didn't read through your question thoroughly.

Your clients might still be trying to connect via port 1688 on host kms.yourdomain.com but cloudflare gave you a different TCP port so py-kms couldn't see the request.