Network Extension rules list

Hello All,

NERules with their included/excluded network are used to configure the system network extension about traffic which should be redirected to respective extension.
Post configuring the rules, how do we check what rules an extension is currently running with.

Is there any api or terminal command equivalent of show command that show the current settings for the running extension.

Obviously, we know the information in the code which populates the rules and therefore we can always dump that info on disk in a format we wish but before I go there wanted to know if there's native/inherent way of doing this that already exist.
To a degree, yes. For fast inspection you can use % scutil.
For example:

Code Block text
% scutil --nc list
* (Connected) xxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx VPN (com.network.extension.sample.app) "My Display Name" [VPN:com.network.extension.sample.app]
% scutil --nc show xxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
# OnDemandRules
# DNSDomainMatch
# RemoteAddress
...


Matt Eaton
DTS Engineering, CoreOS
meaton3@apple.com
Network Extension rules list
 
 
Q