Windows 10/11 x 64 and WebView2
The current version does not support 32 bit Windows, Windows 7/8, or Windows ARM64. Target HTTP/HTTPS services must have been started and be accessible directly from the current computer; Microsoft Edge WebView2 Runtime is also required for interface operations.
Download official documents and verify SHA-256
The official download file name ZhiHua-JieSuo-2.0.1-Windows-x64.zip，大小约 20.8 MB。打开 PowerShell，切换到下载目录或直接执行：
Get-FileHash '.\ZhiHua-JieSuo-2.0.1-Windows-x64.zip' -Algorithm SHA256287292c34c4ac4ae24955b22743e591a6d38c7801910e371f7bd89534736573bPowerShell returns Hash which must be fully consistent with the official values. If different, do not run the program, and delete the file and redownload it from the ZhiHua Tech official network. The verification can detect file damage or replacement, but the source of the download must also be confirmed.
Run from a fixed directory after full depression
Full depressurization ZIP
Right-click ZIP selects " All Decompression ", suggesting that you can unpress the document or tool directory. Do not double-click the EXE run in the compression package, otherwise the file may not be located.
Keep directory file complete
Confirm the program of the HSBC after the decompression cloudflared.exe 等随附文件仍在原目录，不要只把单个 EXE 拖到桌面。
Start the Zinghua shuttle.
Double-click the main program to start. If Windows displays a security alert, check the source and SHA-256 and then proceed as described in the following section.
Configure and start service
Read the boundaries, fill in local service names, IPs, ports and protocols, and start the temporary public network tunnel after local conditions are regular.
What about the tidbit of Microsoft Defender SmartScreen?
The current public version does not have a commercial code signed certificate, Windows may show that “Windows has protected your computer” or “unknown publisher.” Only when the document is from the ZhiHua Tech network and the SHA-256 is fully consistent can you check for “additional information” and check the application name. If the source of the document is unknown, Hash is inconsistent or the security software reports a specific malicious act, the document should be stopped and deleted.
Check WebView2 when interface is empty or unable to start
Windows 11 and most of the continuously updated Windows 10 computers are usually installed Microsoft Edge WebView2 Runtime. If application does not have an interface, hints are missing WebView2 or exits immediately, install Evergreen Standalone Installer from the Microsoft official page and restart the application. Do not retrieve the running library from an unknown download station.
Fill in local services and start a temporary public tunnel
127.0.0.1 表示当前 Windows 电脑。访问局域网其他设备时，应填写目标设备 IP，并先在当前电脑浏览器中确认该地址可以直接访问。
| scene | Agreements | IP or hostname | Port |
|---|---|---|---|
| Frontend development service | Automatic | 127.0.0.1 | 3000 |
| API | HTTP | 127.0.0.1 | 8080 |
| HTTPS Service | HTTPS | 127.0.0.1 | 8443 |
| LAN Device Page | Automatic | 192.168.1.20 | 80 |
- Validates the local address in the browser first, confirming that the service itself is running.
- Go back to the SWCP and check that local service is in a normal state and click "start service."
- The waiting state changes from detection, connection to operation.
- Copy randomly generated
https://*.trycloudflare.com地址，在另一网络环境测试。 - The service is discontinued after the joint or demonstration has ended and the temporary address subsequently lapses.
Protocol, HTTPS and multiple local services
"Auto" is appropriate for the uncertainty of the target protocol; it is directly available when specified as HTTP or HTTPS. The public network portal is always HTTPS, but the client-to-local service is still connected to the selected protocol. Local HTTPS uses a self-signed certificate, and allows for the self-signed option to be opened only for objects that you know and trust.
You can add several additional independent services, such as front-end pages, API and EMS pages. Each service maintains an IP, port, protocol, tunnel process and random public network address.
State meanings and common failures
Priority is given to the last red or yellow message of the Run Record. When a tunnel is created, usually it is not accessible to local targets; when a public network address cannot be generated, check whether the enterprise network, firewall or security software prevents cloudflared.exe 访问 Cloudflare。
Configure, Logs and Unmount
Program configuration is usually stored in %APPDATA%\知华界梭\profiles.json，日志通常位于 %APPDATA%\知华界梭\app.log。排查问题时可先复制日志并移除敏感地址后再反馈。卸载前停止全部服务并退出应用，随后删除解压目录；如需清除本地配置，再删除对应的 AppData 目录。删除配置后无法恢复原服务列表。
Free internal penetration of secure borders
- It is only for development, interface coordination, testing, demonstration and short-term sharing and is not suitable for the production environment.
- Only HTTP/HTTPS Web service is supported, not VPN, and no generic TCP/UDP forwarding is provided.
- The public connection defaults that there is no password, access control or identification from the WikiLeaks.
- Databases, routers backstages, equipment management pages, uncertified backstages, confidential documents or sensitive data are not published.
- Only those services owned or explicitly authorized by them are issued, and unauthorized visits, attacks, covert agents or unlawful uses are prohibited.
- The traffic is via the Cloudflare network and is subject to the Cloudflare clause, privacy policy and technical restrictions.
Windows Edition FAQs
Can only copy the main program EXE to the desktop?+
No. The SWCP needs to use accompanying files such as cloudflared, and should maintain the complete structure of the depressed directory. You can create desktop shortcuts for the main program, but do not break down the program directory.
Windows Defender, is it a virus that hints to the unknown publisher?+
Unknown publishers usually indicate that the document is not signed by a commercial code and cannot prove safety or malicious intent alone. Please also confirm the official network source and SHA-256; do not run if the security software reports specific threats, unknown sources or al-Hashi inconsistencies.
What about turning on the backscreen or backing back?+
Install or repair Microsoft Edge WebView2 Runtime first, and restart again. There are still problems with accessing the app log under AppData and confirming the system as supported Windows 10/11 x64.
Why is the Internet link 502?+
The Claudflare tunnel is usually established, but the Sino-China shuttle cannot access the target local service. First, the current computer browser visits the IP and port, then checks protocols, ports and local firewalls.
What about the failure of the network?+
The enterprise network may limit the use of Cloudflare Tunnel. Please let the network administrator confirm the strategy not to shut down terminal security software or bypass enterprise network controls without permission.
Official reference
- Microsoft Edge WebView2 Official noteMicrosoft Developer
- Cloudflare Quick Tunnels Official NoteCloudflare Developers