What is the replacement for interface filters in network extension?

Hi Experts,


I know there are replacements for KAUTH, socket and IP filters in system extension according to https://developer.apple.com/support/kernel-extensions/.


Could you please share with me the replacement for interface filters in the network extension? thanks.

https://developer.apple.com/library/archive/documentation/Darwin/Conceptual/NKEConceptual/interface_filter_nke/interface_filter_nke.html#//apple_ref/doc/uid/TP40001858-CH230-SW1

Answered by DTS Engineer in 406163022

Take a look at NetworkExtension filter packet providers (

NEFilterPacketProvider
). The
NEFilterPacketHandler
callback is given both the interface (via the
interface
parameter) and the link-level header (at the start of the buffer pointed to be
packetBytes
).

Share and Enjoy

Quinn “The Eskimo!”
Apple Developer Relations, Developer Technical Support, Core OS/Hardware

let myEmail = "eskimo" + "1" + "@apple.com"
Accepted Answer

Take a look at NetworkExtension filter packet providers (

NEFilterPacketProvider
). The
NEFilterPacketHandler
callback is given both the interface (via the
interface
parameter) and the link-level header (at the start of the buffer pointed to be
packetBytes
).

Share and Enjoy

Quinn “The Eskimo!”
Apple Developer Relations, Developer Technical Support, Core OS/Hardware

let myEmail = "eskimo" + "1" + "@apple.com"

Thanks a lot, eskimo.

What is the replacement for interface filters in network extension?
 
 
Q