CF gives DNS protection
can open also .onion PARALLELY also
above WAF settings are NOT always can be applied properly