Apple services
apple-relay.cloudflare.com
apple-relay.cloudflare.com, apple-relay.fastly-edge.com and cp4.cloudflare.com are in Cloudflare's and Fastly's domains. Apple lists all three for Private Cloud Compute.
Short answer
Hosts on Cloudflare and Fastly that Apple lists for Private Cloud Compute, where some Apple Intelligence requests are processed.
Block with care
Blocking them stops Apple Intelligence requests that need Private Cloud Compute. On-device features keep working.
- Matches
apple-relay.cloudflare.comapple-relay.fastly-edge.comcp4.cloudflare.com
A name with *. covers every name under it: *.push.apple.com matches 1-courier.push.apple.com.
What it serves
Apple's enterprise host list names the three hosts in its Apple Intelligence, Siri, and Search section, for “Private Cloud Compute”, on iOS, iPadOS and macOS.
On a Mac, privatecloudcomputed encrypts and sends requests to validated cloud compute nodes, its man page says.
Apple says that Private Cloud Compute uses your data only for the request, and that Apple can't access it.
Processes that use it
What breaks if you block it
Block with care
Blocking them stops Apple Intelligence requests that need Private Cloud Compute. On-device features keep working.
What breaks if you block it
- Apple Intelligence features that use Private Cloud Compute fail.
With Kilobat Pro and the network filter, you can block a host for every app or for one app: in Connections, select a connection and choose Block. Apple’s own services are never blocked by Kilobat’s Protection lists.
Notes
These hosts are in Cloudflare's and Fastly's domains, but Apple lists them for its own service.
Sources
- Apple Support: Use Apple products on enterprise networks
- Apple Support: Apple Intelligence and privacy on Mac
- privatecloudcomputed(8), man page installed with macOS 27.2
Checked on 1 November 2026.