CF gives DNS protection

can open also .onion PARALLELY also

above WAF settings are NOT always can be applied properly