Title: Apple policy - unsupported use of packet tunnel providers · Issue #156 · confirmedcode/Lockdown-iOS · GitHub
Open Graph Title: Apple policy - unsupported use of packet tunnel providers · Issue #156 · confirmedcode/Lockdown-iOS
X Title: Apple policy - unsupported use of packet tunnel providers · Issue #156 · confirmedcode/Lockdown-iOS
Description: Hey Devs, I was curious to know if you had any difficulty to validate the app on Apple store. When I read policy around packet tunnel on the official documentation it seems that it is not allowed to do what you do in the app. We can read...
Open Graph Description: Hey Devs, I was curious to know if you had any difficulty to validate the app on Apple store. When I read policy around packet tunnel on the official documentation it seems that it is not allowed t...
X Description: Hey Devs, I was curious to know if you had any difficulty to validate the app on Apple store. When I read policy around packet tunnel on the official documentation it seems that it is not allowed t...
Opengraph URL: https://github.com/confirmedcode/Lockdown-iOS/issues/156
X: @github
Domain: github.com
{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Apple policy - unsupported use of packet tunnel providers","articleBody":"Hey Devs, \r\nI was curious to know if you had any difficulty to validate the app on Apple store. When I read policy around packet tunnel on [the official documentation](https://developer.apple.com/documentation/technotes/tn3120-expected-use-cases-for-network-extension-packet-tunnel-providers) it seems that it is not allowed to do what you do in the app. We can read:\r\n\r\n\u003e Unsupported uses of packet tunnel providers\r\n\u003e \r\n\u003e Do not use a packet tunnel provider to implement a network content filter. Packets that are read from NEPacketTunnelFlow are meant to be sent over a tunnel connection to a remote server for injection into a remote network. They are not meant to be dropped or re-injected back into the system. Doing so is a content filter action, as supported by one of the Network Extension Content Filter APIs. On iOS, implement a connection-based content filter using NEFilterDataProvider and NEFilterControlProvider. On macOS, implement a connection-based content filter with NEFilterDataProvider or a packet-based content filter with NEFilterPacketProvider. On macOS, using both providers at the same time is supported.\r\n\u003e \r\n\u003e Do not use a packet tunnel provider to intercept all DNS traffic on the system.\r\n\u003e For small sets of DNS traffic inside your isolated network, this is reasonable. However, trying to intercept all DNS traffic on the system can result in endless edge cases and problems during development and deployment. As an alternative use the NEDNSProxyProvider or the DNS Settings APIs. These APIs were built for handling all DNS traffic on the system.\r\n\r\nThanks in advance for your feedback.\r\n","author":{"url":"https://github.com/paillardf","@type":"Person","name":"paillardf"},"datePublished":"2024-03-28T16:40:11.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":0},"url":"https://github.com/156/Lockdown-iOS/issues/156"}
| route-pattern | /_view_fragments/issues/show/:user_id/:repository/:id/issue_layout(.:format) |
| route-controller | voltron_issues_fragments |
| route-action | issue_layout |
| fetch-nonce | v2:79b234b6-1b86-d722-60bd-bcfa09107d2a |
| current-catalog-service-hash | 81bb79d38c15960b92d99bca9288a9108c7a47b18f2423d0f6438c5b7bcd2114 |
| request-id | CEA4:267409:1CF26D1:26061C8:6A5C8B8B |
| html-safe-nonce | 3d5c2271f67f30c7a5b9840a459f15e77b8bb4502832ffd49e31f6f2a22eed30 |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJDRUE0OjI2NzQwOToxQ0YyNkQxOjI2MDYxQzg6NkE1QzhCOEIiLCJ2aXNpdG9yX2lkIjoiNjg5NDQ2MDE1ODc4MzI5NDM0NyIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9 |
| visitor-hmac | 6899cdb81b572dee2da02265b75b4fc2837cf2d518dc11c671fa4b9f5a207154 |
| hovercard-subject-tag | issue:2213670900 |
| github-keyboard-shortcuts | repository,issues,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | / |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/_view_fragments/issues/show/confirmedcode/Lockdown-iOS/156/issue_layout |
| twitter:image | https://opengraph.githubassets.com/71c3c44fe3a65800ffa0b7694f4ba644a9de0f9a3a0b3312c9071527127cd9cd/confirmedcode/Lockdown-iOS/issues/156 |
| twitter:card | summary_large_image |
| og:image | https://opengraph.githubassets.com/71c3c44fe3a65800ffa0b7694f4ba644a9de0f9a3a0b3312c9071527127cd9cd/confirmedcode/Lockdown-iOS/issues/156 |
| og:image:alt | Hey Devs, I was curious to know if you had any difficulty to validate the app on Apple store. When I read policy around packet tunnel on the official documentation it seems that it is not allowed t... |
| og:image:width | 1200 |
| og:image:height | 600 |
| og:site_name | GitHub |
| og:type | object |
| og:author:username | paillardf |
| hostname | github.com |
| expected-hostname | github.com |
| None | 5290d7e14309ad1e76106a9c4237bd1041517e83ea182c8ab756752cb0c6940b |
| turbo-cache-control | no-preview |
| go-import | github.com/confirmedcode/Lockdown-iOS git https://github.com/confirmedcode/Lockdown-iOS.git |
| octolytics-dimension-user_id | 31078306 |
| octolytics-dimension-user_login | confirmedcode |
| octolytics-dimension-repository_id | 198521860 |
| octolytics-dimension-repository_nwo | confirmedcode/Lockdown-iOS |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 198521860 |
| octolytics-dimension-repository_network_root_nwo | confirmedcode/Lockdown-iOS |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | false |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 9c975978430e9ad293956f2bbdaf153b1bd84a99 |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
Links:
Viewport: width=device-width