Cloudflare integration with PIA for privacy and security
Cloudflare integration with PIA for privacy and security
Hi there! I've just started using Cloudflare as my DNS resolver. It offers quick responses and better privacy compared to my ISP. I know Cloudflare isn't a VPN, but if I'm also using PIA, what happens? Would Cloudflare still see my DNS requests while PIA is active? In the PIA settings, the DNS is always pointing to PIA, so it might override your Cloudflare configuration in my OS network options. If my router is set to use Cloudflare, PIA would likely handle everything through its own software. I'm curious if anyone has experience with this setup and whether it affects speed or privacy. I usually prefer PIA for extra security but notice my internet feels slower sometimes. Cloudflare seems like a good middle ground. Let me know what you think!
Check if your DNS queries originate from Cloudflare. Using plain DNS makes it possible for them to intercept, though this applies to all unencrypted DNS traffic. Without DNS-over-TLS or DNS-over-HTTPS, this isn't a concern.
I performed the dnstest with PIA turned off and the ISP shown as Cloudflare. After enabling PIA again, refreshing the page, and repeating the test, the ISP still appeared as Cloudflare. When I also turned off DoH in Firefox, the result changed to Cogent Communications. This suggests that when DoH is disabled, PIA manages DNS queries. It seems similar with other tools that might override DNS at different levels. If I disable DoH in my browser, I can confirm PIA handles DNS requests; otherwise, they use OS settings. Without DoH encryption, Cloudflare remains a benefit, though unencrypted traffic could be intercepted if the data is read.
Thanks again @Levent The encryption isn't the main factor here. It seems the information would move to Cloudflare instead of my local ISP. Since Cloudflare deletes data within 24 hours, it adds an extra layer of privacy.
Likely, though in my area of the forest ISPs are recognized for interfering with unencrypted DNS at government security levels.
leaving DoH on in Firefox with PIA enabled means the DNS traffic would still pass through Cloudflare, but it would be removed after 24 hours.