---
title: "apple-relay.cloudflare.com: what Apple's Private Cloud Compute relays are · Kilobat"
url: "https://kilobat.app/hosts/private-cloud-compute-relays"
description: "apple-relay.cloudflare.com, apple-relay.fastly-edge.com and cp4.cloudflare.com are hosts Apple lists for Private Cloud Compute. What blocking them breaks."
---

Apple services

# apple-relay.cloudflare.com

`apple-relay.cloudflare.com`, `apple-relay.fastly-edge.com` and `cp4.cloudflare.com` are in Cloudflare's and Fastly's domains. Apple lists all three for Private Cloud Compute.

Run by Apple, through Cloudflare and Fastly · Ports: 443 TCP and UDP · Checked: 1 November 2026

## Short answer

Hosts on Cloudflare and Fastly that Apple lists for Private Cloud Compute, where some Apple Intelligence requests are processed.

Block with care

Blocking them stops Apple Intelligence requests that need Private Cloud Compute. On-device features keep working.

Matches

`apple-relay.cloudflare.com` `apple-relay.fastly-edge.com` `cp4.cloudflare.com`

A name with `*.` covers every name under it: `*.push.apple.com` matches `1-courier.push.apple.com`.

## What it serves

Apple's enterprise host list names the three hosts in its Apple Intelligence, Siri, and Search section, for “Private Cloud Compute”, on iOS, iPadOS and macOS.

On a Mac, [`privatecloudcomputed`](https://kilobat.app/processes/privatecloudcomputed) encrypts and sends requests to validated cloud compute nodes, its man page says.

Apple says that Private Cloud Compute uses your data only for the request, and that Apple can't access it.

## Processes that use it

- [privatecloudcomputed](https://kilobat.app/processes/privatecloudcomputed): Part of macOS. It encrypts and sends Apple Intelligence requests that need a larger model to Apple's Private Cloud Compute servers.

## What breaks if you block it

Block with care

Blocking them stops Apple Intelligence requests that need Private Cloud Compute. On-device features keep working.

What breaks if you block it

- Apple Intelligence features that use Private Cloud Compute fail.

With Kilobat Pro and the network filter, you can block a host for every app or for one app: in Connections, select a connection and choose Block. Apple’s own services are never blocked by Kilobat’s [Protection](https://kilobat.app/docs/blocking#protection) lists.

## Notes

These hosts are in Cloudflare's and Fastly's domains, but Apple lists them for its own service.

## Sources

- [Apple Support: Use Apple products on enterprise networks](https://support.apple.com/en-us/101555)
- [Apple Support: Apple Intelligence and privacy on Mac](https://support.apple.com/guide/mac-help/apple-intelligence-and-privacy-mchlfc0d4779/mac)
- privatecloudcomputed(8), man page installed with macOS 27.2

Checked on 1 November 2026.

## Related

- [apple-relay.apple.com](https://kilobat.app/hosts/apple-relay-apple-com): The Apple host that Apple lists for Apple Intelligence Extensions.
- [guzzoni.apple.com](https://kilobat.app/hosts/guzzoni-apple-com): Apple's host for Siri and dictation requests.