Private Relay interferes with NetworkExtension, breaks port 80 traffic

Question

Created Aug ’21

Replies 4

Boosts 0

Views 2.4k

Participants 3

I have a VPN app that uses a tunnel to route traffic, and I'm finding that port 80 traffic cannot be routed when Private Relay is enabled. Oddly, it's just port 80 traffic. HTTP traffic over 8080 or other ports still work fine.

Specifically, connecting the socket using the connect() function for a port 80 address always returns the same error "No route to host".

According to the Packet Tunnel Provider documentation (https://developer.apple.com/documentation/networkextension/packet_tunnel_provider?language=objc):

When a VPN configuration is active, connections use the VPN instead of iCloud Private Relay. Network Extension providers also don’t use iCloud Private Relay.

This is not the behavior that we are seeing. As soon as I disable Private Relay on the device, the port 80 traffic flows correctly and there's no more errors. We already tried excluding the Private Relay servers from the tunnel, but that didn't have any impact on this issue. Is there anything else we could try to work around this?

So far we've tested with iOS 15 beta versions through beta 4. Also tested on developer versions as well as public beta.

Boost

Answer 1

jda-blue OP

Aug ’21

Through beta 5 now, same result.

0

Answer 2

lbc OP

Oct ’21

Seeing this as well, and with iOS 15 GM.

However, we discovered that "no route to host" error is only occurring with sockets, e.g. not with NWTCPConnection. Unfortunately, there are reasons we need to use sockets directly (e.g. setting socket options, binding to the network interface, etc), so this is not a viable solution.

Can someone at Apple provide guidance on what we can do about this?

0

Answer 3

jda-blue OP

Nov ’21

Still going back and forth on this issue. This does work perfectly fine as long as Private Relay isn't enabled.

For now, our alternate plan if we can't get this resolved is to tell our customers to turn off Private Relay. We'll add it to our help articles, customer service troubleshooting steps, chatbot, etc.

0

Answer 4

jda-blue OP

Mar ’22

Just re-tested as of iOS 15.3.1 and this issue doesn't appear to be there anymore for iOS.

0