Firefox constantly sending data 3KByte/S to Cloudflare servers
I have recently discovered that Firefox is constantly sending data at around 3KBytes/S to a variety of Cloudflare servers.
What is the data that is being sent and why is this happening?
This has started to occur in one of the last updates to Firefox.
Currently running 151.0.4 (64-bit) on Windows
Does this constitute a privacy violation, what is the data that is being sent?
All Replies (3)
And you don't have Cloudflare set for Firefox DNS over HTTPS as the provider? (It should not be requesting things constantly even when idle but there's enough internal service endpoints to hit even in background to generate DNS traffic however I'd expect for the same hosts this to be reasonably cached to start with.)
If you create a new clean profile without addons and no tabs/sessions to restore, do you still see it?
Generally most of Mozilla traffic terminates at Fastly POPs, incl. OHTTP and IP protection features.
If I open Firefox with a clean session and do not navigate to a web page, Firefox remains silent and does not start sending data.
I have configured Firefox not to use DNS over HTTPS so it should not be polling Cloudflare at all.
After navigating to any site for example Amazon, Google, etc. Using windows resource manager Firefox can be seen connecting to and constantly sending data at around 3KByte/S to one of the four following IP addresses, although there may be more.
172.67.192.95 172.66.172.219 104.18.11.183 104.21.20.113
All of the above trace back to Cloudflare.
I have configured my firewall to block access to the above IP addresses and I have now ceased using Firefox as my trust in it is significantly diminished.
To me this represents a substantial security and privacy threat. I would like to know what data is being sent and why.
Additionally, I note if I close the tabs with the websites that have been visited and just leave the browser open on a blank tab, the network activity continues until Firefox is closed.
GT2026-XYZ மூலமாக
You can check the about:networking page for any additional info. This is the same as https://support.mozilla.org/questions/1368391 or https://support.mozilla.org/en-US/questions/1387375#answer-1530837 basically — you'd need to capture the host for the connection to tell anything useful. Like I said, you want to test with a separate new profile first to rule out any addons, as from the internal list of services Domains to allow for Firefox there's nothing hosted at Cloudflare, unless you use their DoH endpoint.
This is the same list as CNAMEs to get the idea about termination: https://www.onlinednslookup.com/bulk-dns-lookup/c78fd861b5cdadaf419d241675a721a0/
This is the longer list with IP resolution incl. networking identification: https://www.onlinednslookup.com/bulk-dns-lookup/c78fd861b5cdadaf419d241675a721a0/A/8.8.8.8/1/0/1/0/0/0/
You might wanna check out How to stop Firefox from making automatic connections for the types of connections and their settings.