Thanks for being a part of WWDC25!

How did we do? We’d love to know your thoughts on this year’s conference. Take the survey here

Per-App VPN

Hi all, im trying to implement a per-app vpn in my network extension (packet tunnel with custom protocol), where only the traffic generated by my application should be routed trought my network extension. It is possible to accomplish that on a non managed or supervised device?

Setting the routingMethod as .sourceApplication in NEPacketTunnelProvider is not possible as it is read-only, can it work trying overriding the var as a computed property?

The documentation lack of examples.

Thanks in advance! Love

Answered by DTS Engineer in 844180022
It is possible to accomplish that on a non managed or supervised device?

Are talking iOS here? If so, the answer to the above is “No.”

On to be clear, supervision isn’t a factor here. What matters is that the device be managed [1], because MDM is how you you set the VPNUUID property on the app so that matches up with the VPNUUID property on the VPN configuration.

For detailed info on NE provider distribution options, see TN3134 Network Extension provider deployment.

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

[1] Except during development, where you can take advantage of NETestAppMapping.

Accepted Answer
It is possible to accomplish that on a non managed or supervised device?

Are talking iOS here? If so, the answer to the above is “No.”

On to be clear, supervision isn’t a factor here. What matters is that the device be managed [1], because MDM is how you you set the VPNUUID property on the app so that matches up with the VPNUUID property on the VPN configuration.

For detailed info on NE provider distribution options, see TN3134 Network Extension provider deployment.

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

[1] Except during development, where you can take advantage of NETestAppMapping.

Hi Eskimo, Yes, im talking about iOS.

Thanks again for the answer!

Per-App VPN
 
 
Q