# Configuring network extensions Customize the various capabilities of your app’s networking stack, such as proxying DNS queries or creating packet tunnels. ## Overview Network Extensions allow you to customize and extend the core networking features of iOS and macOS. For example, your app can implement a virtual private network (VPN) client for a flow-oriented or packet-oriented custom VPN protocol, which an enterprise might require to facilitate secure remote access to resources not available on the public internet. Prior to implementing a customized networking stack, follow the steps in the [Add a capability](/documentation/Xcode/adding-capabilities-to-your-app#Add-a-capability) section of [Adding capabilities to your app](/documentation/Xcode/adding-capabilities-to-your-app) to add the capability to your iOS or macOS app, and select the Network Extensions capability from Xcode’s Capabilities library.  After you add the Network Extensions capability, Xcode updates your app’s entitlements file to include the , which is an array that comprises the app capabilities you enable. If Xcode automatically manages your app’s signing, it also enables the Network Extensions capability for your app’s App ID in your developer account. > Note: If you remove the Network Extensions capability in Xcode, you must > manually update the configuration of your app’s App ID in your developer account > to disable Network Extensions. ### Enable the required app capabilities Before your app can use the framework to customize and extend the core networking features of iOS and macOS by implementing specific app capabilities, you must configure your Xcode project to include the necessary entitlements by performing the following steps: 1. Select your project in Xcode’s Project navigator. 2. Select the app’s target in the Targets list. 3. Click the Signing & Capabilities tab in the project editor. 4. Locate the Network Extensions capability. 5. Enable one or more app capabilities by checking the corresponding checkboxes.  Xcode automatically updates the array in your app’s entitlements file to include the enabled app capabilities. > Important: App capabilities may have specific restrictions and use cases, > such as only being available on supervised iOS devices. For more information, > see the documentation for each capability. The following table lists the app capabilities that Network Extensions support: |Name |Description | |--------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| |App Proxy |Your app provides a virtual private network (VPN) client for a flow-oriented, custom VPN protocol. For more information, see . | |Content Filter|Your app examines user content as it passes through the network stack and determines if the system should allow it or block it. For more information, see and the sample code .| |Packet Tunnel |Your app provides a VPN client for a packet-oriented, custom VPN protocol. For more information, see . | |DNS Proxy |Your app is responsible for resolving all DNS queries on-device using a custom protocol. For more information, see . | |DNS Settings |Your app creates and manages a system-wide DNS configuration using the DNS protocols DNS-over-TLS and DNS-over-HTTP. For more information, see . | > Tip: To learn more about the APIs you use to create apps that extend and > customize the device’s networking capabilities, see the WWDC videos > [Network Extensions for the Modern Mac](https://developer.apple.com/videos/play/wwdc2019/714), > [Advances in Networking, Part 1](https://developer.apple.com/videos/play/wwdc2019/712), > and [What’s New in Network Extension and VPN](https://developer.apple.com/videos/play/wwdc2015/717). --- Copyright © 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)