initiating / executing network extension by an other network extension

> We have an implementation of a tunnel packet provider

What platform are you working on?

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

iOS, macOS M1

The desired resolute is: when the tunnel packet provider is launched by the settings app, the dns proxy will be triggered and launch as a resort of successful opening of the tunnel packet provider.

Thanks for any help on that!

> when the tunnel packet provider is launched by the settings app

Packet tunnel providers are not launched by Settings. Rather, they are launched by the system in response to configuration changes that the user makes settings. If the packet tunnel provider is embedded within your app, you can use NE APIs to do the sorts of things that the user does in settings (add a configuration, change it, remove it, and connect and disconnect).

You have much less control over an embedded DNS proxy. iOS only supports DNS proxies on managed devices — for the details, see TN3134 Network Extension provider deployment — which means that, in production [1], your app has no ability to change the proxy configuration. Rather, that’s controlled by the site manager who uses MDM to push configuration profiles.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

[1] As a convenience, the system allows Development-signed builds to manipulate DNS proxy configurations.

Can the DNS Proxy network extension be launched by the system as a result of (dns proxy and packet tunnel provider network extensions are embedded in the native app):

1. System launches packet tunnel provider network extension (as result of user switched on the VPN button in settings).
2. Successful connection (packet tunnel is opened and connected).

Can that be done?

When a user is using the native app, the app uses the APIs and triggers / launches the packet tunnel provider. Then on success opening / connection the app launches the DNS Proxy. We would like to have the same abilities when the user triggers the packet tunnel provider from the settings app. Can that be done?

Just FYI for those following along at home, I’ll be helping Reuven8e14 in a different context.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"