Hello!
I'm developing NETransparentProxyProvider which started to work unexpectedly on macOS 15.
Seems that iCloud Private Relay is not auto-disabled anymore in favor of another filtering software, when Firewall is enabled in macOS 15. Disabling firewall immediately restores old behavior.
To reproduce this issue, you need to enable both iCloud Private Relay and Firewall.
Then, Safari will always try to use iCloud Private Relay, even if Transparent Proxy has "destinationAddress:nil" rule. Every connection from Safari will be to "mask.icloud.com" over HTTP/3. Connections inside are not visible as separate flows.
Since I have excludedRule for "icloud.com" (to not to alter Apple services), Safari traffic is just stopped to be processed.
Is new behavior is expected or some type of regression?
fionov
Users receive reputation points by contributing quality content to the forums.
Posts include post and replies published on the forums.
Post authors can mark replies as Accepted to indicate successful solutions.
Apple Developer Forums admins can mark replies as Apple Recommended to indicate an approved solution