When you send a standard DNS query, both your ISP and the DNS resolver can see your IP address and the domains you look up. Cloudflare's Tor onion service routes your DNS queries through the Tor network, which guarantees a significantly higher level of anonymity than making requests directly. The resolver never sees your IP address, and your ISP cannot determine that you attempted to resolve a domain name.
Read more about this service in this blog post ↗.
Unlike standard DNS modes where traffic is sent directly to an IP address, the Tor network routes traffic without exposing IP addresses. This means all connections to the hidden resolver must go through a Tor client.
Before you start, head to the Tor Project website ↗ to download and install a Tor client. If you use the Tor Browser, it will automatically start a SOCKS proxy ↗ at 127.0.0.1:9150.
If you use Tor from the command line, create the following configuration file:
SOCKSPort 9150Then you can run tor with: