Securing Windows RDP with Cloudflare Tunnels and Zero Trust Access: Eliminating Port 3389 Exposure, Brute-Force Attacks, and Inbound Firewall Holes: Sysadmin Runbook
A complete step-by-step engineering runbook for securing Windows Server Remote Desktop Protocol (RDP) using Cloudflare Zero Trust Tunnels (cloudflared), eliminating public port 3389 exposure, enforcing Google/GitHub MFA, and establishing outbound-only encrypted RDP tunnels.







































































