MacOS 14+ with Apple Silicon
The current installation package does not support Intel Mac, or the MacOS 13 and earlier versions. Target HTTP/HTTPS services must be started and can be accessed directly from the current Mac; the enterprise or campus network should also be able to connect to the Cloudflare network.
Download official documents and verify SHA-256
The official download file name ZhiHua-JieSuo-4.1.3-macOS-arm64.zip，大小约 21.7 MB。首次运行前可在“终端”执行以下命令：
shasum -a 256 ~/Downloads/ZhiHua-JieSuo-4.1.3-macOS-arm64.zip77db2aa9e6c7a51d7a95efdfd27d329f3a22e7982b689603d32a612650506338The result must be completely consistent. If different, do not open the file, and delete it and redownload it from the ZhiHua Tech official network. The check shows that the download is corrupt or the file is replaced, but is not a substitute for judging the source and the use.
Start after installation to Application
Unpressure download file
Press two ZIP files to decompress and not run in the browser temporary download directory for long periods.
Move Apply
Opens a depressurized folder to drag " Know-how.app " into the " Application " folder in Finder.
Start from application
Go to the Application, press two lines of the "Know-China shuttle". If intercepted by the system, read the next section before processing.
Confirm the use of the boundary.
Read the first use of tips, privacy statements and public web to publish risks, confirm them and enter the main interface.
What if you can't check if you have malware?
The current public version, which uses local temporary signatures, has not yet been officially signed and notarized through Apple Devloper ID. Only when the document is from the ZhiHua Tech network and is consistent with SHA-256, can you try to open it first and then go to "System Settings Privacy and Security" and select "Systems to open" and check the application name in the security area. Do not do this for files with unknown sources or inconsistent verifications.
Fill in local services and start a temporary public tunnel
127.0.0.1 表示当前 Mac。访问局域网其他设备时，应填写目标设备 IP，并先确认当前 Mac 可以直接访问它。
| scene | Agreements | IP or hostname | Port |
|---|---|---|---|
| Frontend development service | Automatic | 127.0.0.1 | 3000 |
| API | HTTP | 127.0.0.1 | 8080 |
| HTTPS Service | HTTPS | 127.0.0.1 | 8443 |
| LAN Device Page | Automatic | 192.168.1.20 | 80 |
- The “local service” is confirmed to be in a normal state and applications are retested on a regular basis.
- Click " Start Service " to confirm that the target service is owned or authorized by you.
- The waiting state changes from being checked, to being connected, to being running.
- Copy randomly generated
https://*.trycloudflare.com地址并测试。 - The service was discontinued after the end of use and the original temporary address was subsequently rendered ineffective.
Protocol AutoDetect, HTTPS and multiple services
"Auto" is suitable for use when local target protocols are not defined; a direct choice is made when it is specified that HTTP or HTTPS. The public portal is always HTTPS, but the client reaches the local target with the selected protocol. Local HTTPS uses a self-signed certificate to open the permission option, which closes this connection to a certificate authentication that only uses local targets that you know and trust.
Click on the extra number next to the " proxy service " on the left to add a service. Each service has a separate name, IP, port, protocol, tunnel process and random public network address.
State meanings and failure determinations
Check the last red or yellow information in the Run Record first, then judge the tunnel network and the public network for self-checking, avoiding multiple modifications.
Stop, exit and unmount
Click on a single service "stop" or "stop all" to close the tunnel. Closing the main window does not mean exiting from the application. Select " Know-how " from the menubar to exit the SKB " or press Comand + Q. Exit when offloading and then move "SKB.app" to the waste paper; check if delete configurations ~/Library/Preferences/cn.zhuatech.jiesuo.plist。
Security, privacy and use of borders
- It is not suitable for the production environment to be developed, coordinated, tested, demonstrated and shared in short time only.
- Only HTTP/HTTPS Web service is supported, not VPN, and the generic TCP/UDP forwarding is not supported.
- The public link defaults that there is no password or identification from the WCP.
- Databases, routers backstages, equipment management pages, uncertified backstages, confidential documents or sensitive data are not published.
- Only services owned by itself or specifically authorized for their use are published, and unauthorized visits, attacks, covert agents or illicit uses are prohibited.
- The traffic is via the Cloudflare network and is subject to the Cloudflare clause, privacy policy and technical restrictions.
FAQs in MacOS
How do we check local service displays?+
First, the current Mac browser opens the local address directly, e.g. http://127.0.0.1:3000. Confirm that the service is started, IP is correct with the port, HTTTP/HTTPS matches; and check firewalls and network accessibility when accessing the LAN device.
What if the Internet address is not available for a long time?+
View the last error in the running record, confirm that the network can access Cloudflare and try again after it has stopped. Enterprises, campuses or restricted networks may intercept Cloudflare Tunnel.
Open the public connection to show 502 Bad Gateway. What's the reason?+
Checks whether local services, ports, protocols and local HTTPS use untrusted self-signed certificates.
Why not support Intel Mac?+
The current public installation package is only designed for Apple Silicon arm64, and is suitable for M1, M2, M3, M4 and subsequent chips. Intel Mac does not download or try to bypass the structure limitations.
Where is the "Still to Open" button?+
Usually you need to try to start it once in the Application and then turn on the System Settings Privacy and Security to scroll down. The portal may only appear for a period of time after interception.
Official reference
- Apple: Open safely on Mac AppApple Support
- Cloudflare Quick Tunnels Official NoteCloudflare Developers