Meaning of Per-App mode

Question

Created Feb ’24

Replies 1

Boosts 0

Participants 2

Hello.

Can someone please explain to me what "per-app" means in "per-app on managed devices" in the context of this document(https://developer.apple.com/documentation/technotes/tn3134-network-extension-provider-deployment)?

Thank you!

Boost

Answer 1

DTS Engineer OP

Apple

Feb ’24

Per-app VPN refers to:

An app proxy provider
A packet tunnel provider in per-app mode (that is, using source-application routing)
One of the built-in VPN transports in per-app mode

The key thing about per-app mode is that there has to be way to identify the app being targeted. There are two parts to this:

Set VPNUUID property in the com.apple.vpn.managed.applayer configuration profile payload.
Set the VPNUUID property on the app itself.

The latter can only be done on managed apps, which is why per-app VPN is only supported on managed devices [1] [2].

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

[1] On iOS and its child platforms. You have an extra option on macOS.

[2] Except during development, where you can take advantage of NETestAppMapping.

0