iCloud Private Relay: What Cloudflare Customers Need to Know
Mar 2, 2022Rustam Lalkaka

Summary
This post details Cloudflare's role as a 'second relay' in Apple's iCloud Private Relay service, explaining how Cloudflare's network, QUIC/MASQUE support, and quiche library are utilized. It provides guidance for website operators on ensuring geolocation accuracy, delivering high-performance user experiences, and managing fraud/bot detection systems that rely on IP addresses, by accommodating shared IP addresses and keeping geolocation databases updated. For Cloudflare customers, it highlights that existing rate limiting and bot management capabilities are already equipped to handle this traffic.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack