---
title: "apple-relay.apple.com: what it is and what breaks if you block it · Kilobat"
url: "https://kilobat.app/hosts/apple-relay-apple-com"
description: "apple-relay.apple.com is the Apple host for Apple Intelligence Extensions. What Apple documents about it, and what breaks if you block it."
---

Apple services

# apple-relay.apple.com

`apple-relay.apple.com` is an Apple host that Apple lists for “Apple Intelligence Extensions”, on port 443 over TCP and UDP, for iOS, iPadOS and macOS.

Run by Apple · Ports: 443 TCP and UDP · Checked: 1 November 2026

## Short answer

The Apple host that Apple lists for Apple Intelligence Extensions.

Block with care

Blocking it may stop Apple Intelligence Extensions. Apple doesn't document which features those are.

Matches

`apple-relay.apple.com`

A name with `*.` covers every name under it: `*.push.apple.com` matches `1-courier.push.apple.com`.

## What it serves

Apple's enterprise host list names `apple-relay.apple.com` in its Apple Intelligence, Siri, and Search section.

Apple lists it separately from the Private Cloud Compute relays, [`apple-relay.cloudflare.com`](https://kilobat.app/hosts/private-cloud-compute-relays).

Apple doesn't describe Apple Intelligence Extensions in that list. Kilobat doesn't guess at what passes through it.

## Processes that use it

- [privatecloudcomputed](https://kilobat.app/processes/privatecloudcomputed): Part of macOS. It encrypts and sends Apple Intelligence requests that need a larger model to Apple's Private Cloud Compute servers.

## What breaks if you block it

Block with care

Blocking it may stop Apple Intelligence Extensions. Apple doesn't document which features those are.

What breaks if you block it

- Apple Intelligence features that use extensions may fail.

With Kilobat Pro and the network filter, you can block a host for every app or for one app: in Connections, select a connection and choose Block. Apple’s own services are never blocked by Kilobat’s [Protection](https://kilobat.app/docs/blocking#protection) lists.

## Apple’s rules for its hosts

Apple’s list, [Use Apple products on enterprise networks](https://support.apple.com/en-us/101555), says that devices open these connections, not Apple’s servers. Apple services fail any connection that uses HTTPS interception, so a proxy that inspects TLS should leave Apple’s hosts alone.

If a firewall allows hosts by name, allowing `*.apple.com` covers most Apple services, Apple says. A firewall that works only with addresses can allow `17.0.0.0/8` for IPv4, and `2403:300::/32`, `2620:149::/32` and `2a01:b740::/32` for IPv6.

To see which app on your Mac opened a connection to this host, use Kilobat’s Connections tab, or the [agent network log](https://kilobat.app/docs/agents#agent-network-log) for AI agents.

## Sources

- [Apple Support: Use Apple products on enterprise networks](https://support.apple.com/en-us/101555)

Checked on 1 November 2026.

## Related

- [apple-relay.cloudflare.com](https://kilobat.app/hosts/private-cloud-compute-relays): Hosts on Cloudflare and Fastly that Apple lists for Private Cloud Compute, where some Apple Intelligence requests are processed.