My macOS application utilizing NEDNSProxyProvider
.
i have a requirement to intercept only DNS requests of a certain query type, while others are expected to continue to their respective origin.
For TCP there are two kinds of extensions NEAppProxyProvider
and NETransparentProxyProvider
. The latter is capable of returning NO
from handleNewFlow
causing the flow to proceed to communicate directly with the flow’s ultimate destination, instead of closing the flow.
Is there a way to configure NEDNSProxyProvider
to work in transparent mode for letting the flow to proceed to communicate directly?
Current NEDNSProxyProvider
limitation of dropping the connection when NO
is returned requies me to open new socket and proxy the requests which causes noticable performance degradation under load.