I’ve got 2 devices with both same iOS version (14.2), the same app and the same configuration (low power mode and low data mode disabled, background refresh enabled) and I have 2 different behaviours : One (called A) receive silent notification all the time The other (called B) receive silent notification ONLY when app is in foreground mode I’ve got other devices on other iOS versions (iOS 12.4.9 and iOS 13.7), I always receive silent notification all the time. So I use Wireshark software to analyse network messages between the B device and my router. When my app is in foreground, I saw silent notification like expected coming from Apple server (17.57.146.4). When I leave my app, I saw my device communicating with Apple server, next I send silent notification but there is nothing, Apple server doesn’t send silent notification. I've got the same behaviour when I lock the device. I use the same test for the A device, I saw device communicating with Apple server even when my app is in background. I think there is a iOS 14.x bug because I don't have any problem on other iOS version below 14.

I found my problem, the solution is here - https://developer.apple.com/forums/thread/115112?answerId=355352022#355352022. When you create a DNS proxy, it : Can only be deployed to supervised devices Must be configured via a configuration profile I've forgotten the configuration profile. I've written it with imazing-profile-editor - https://apps.apple.com/fr/app/imazing-profile-editor/id1487860882?mt=12 on Mac App Store then I push it with Apple Configurator 2. It works like a charm.

The workflow is simple, user or MDM admin download application from App Store then user open application and enable DNS Proxy.

I download IPA in App Store, unzip it, and run the following command : codesign -d --entitlements - myApp.app/myApp I have this : ??qq<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>com.apple.developer.networking.wifi-info</key> <true/> <key>keychain-access-groups</key> <array> <string>........com.myApp.app</string> </array> <key>com.apple.developer.team-identifier</key> <string>........</string> <key>com.apple.developer.networking.networkextension</key> <array> <string>dns-proxy</string> </array> <key>application-identifier</key> <string>.........com.myApp.app</string> <key>aps-environment</key> <string>production</string> <key>com.apple.security.application-groups</key> <array> <string>group.com.myApp.app</string> </array> </dict> </plist> And I also run this command on my DNS proxy extension app : ??qq?<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>application-identifier</key> <string>..............com.myApp.app.DNSProxyProvider</string> <key>keychain-access-groups</key> <array> <string>.............com.myApp.app</string> </array> <key>com.apple.developer.team-identifier</key> <string>..........</string> <key>com.apple.security.application-groups</key> <array> <string>group.com.myApp.app</string> </array> <key>com.apple.developer.networking.networkextension</key> <array> <string>dns-proxy</string> </array> </dict> </plist> When you look at my IPA entitlements in App Store, there is no problem, I don't understand why I have this problem. Any suggestions ? Regards.

Hi, Thanks for your answer. I have a last question, Is it mandatory to use an IP for the DNS server (no domain name possible)? Regards.