Does Cloudflare operate Tor relays?

I came across a blog post asserting that Cloudflare operates Tor exit relays to deanonymize traffic and his proof is that when he's using Tor Browser and goes to speedtest.net it shows Cloudflare as his host? Is there any truth to this whatsover? https://simplifiedprivacy.com/torlies/

Simplified Privacyadmin

You’re being lied to. Tor is 2 hops, not 3

Cyb3r-Jak3•1/19/24, 4:38 PM

I’m suspicious about that article, he says it’s only 2 nodes but his flow shows 3 nodes. Entrance, relay and exit

Chaika•1/19/24, 4:41 PM

Cloudflare literally runs many of the Tor nodes

That's really easy to disprove, all that info is public:
https://metrics.torproject.org/bubbles.html#as

Cyb3r-Jak3•1/19/24, 4:42 PM

Cloudflare also doesn’t oppress users by having captchas. They offer sites the ability to block or challenge Tor. Site owners have the option to not use them. And I’d be surprised if Cloudflare was able to de anonymize Tor traffic given the amount of work it would take to do that, you’d have to be the tor protocol

john mcafeeOP•1/19/24, 4:44 PM

What is the rational explanation for Cloudflare coming up in Tor Browser though? I just replicated it multiple times.

Chaika•1/19/24, 4:44 PM

Cloudflare has a service for websites using Cloudflare (like speedtest.net) where they support onion routing via the alt-svc header: https://developers.cloudflare.com/network/onion-routing/

Onion Routing and Tor support · Cloudflare Network settings docs

Improve the Tor user experience by enabling Onion Routing, which enables Cloudflare to serve your website’s content directly through the Tor network …

Chaika•1/19/24, 4:45 PM

Could be that? I'm no expert on TOR though lol

Cyb3r-Jak3•1/19/24, 4:45 PM

Does tor browser allow you to check your circuit? Can see the nodes you are using

john mcafeeOP•1/19/24, 4:45 PM

yes

john mcafeeOP•1/19/24, 4:45 PM

1 sec

Chaika•1/19/24, 4:45 PM

They do mention

Tor users no longer access your site via exit nodes, which can sometimes be compromised, and may snoop on user traffic.
Human Tor users and bots can be distinguished by our Onion services, such that interactive challenges are only served to malicious bot traffic.

john mcafeeOP•1/19/24, 4:46 PM