NEPacketTunnelFlow

If you call

-readPacketsWithCompletionHandler:

Generally I recommend that you use the newer

-readPacketObjectsWithCompletionHandler:

NEPacket

data

protocolFamily

Share and Enjoy
—
Quinn “The Eskimo!”
Apple Developer Relations, Developer Technical Support, Core OS/Hardware

let myEmail = "eskimo" + "1" + "@apple.com"

Thank you for your reply

I still have a problem, according to thepost, PacketTunnelProvider can only proxy HTTP. If he only configures the HTTP proxy, then -readPacketsWithCompletionHandler: or -readPacketObjectsWithCompletionHandler: can read UDP data?

-readPacketsWithCompletionHandler: What are the values of the method's protocols? What do you mean separately? I saw from the log that there is 2 this value.

[I must apologies for my previous post; I got confused and posted incorrect info, which I’ve corrected now.]

I saw from the log that there is 2 this value.

Right. That’s the value of

AF_INET

AF_INET6

Neither of these help you distinguish between the various protocols running over IP. To do that you’ll have to parse the IPv4 or IPv6 header (depending on the packet protocol number) to find the IP protocol number, which is likely to be either 6 (

IPPROTO_TCP

IPPROTO_UDP

I still have a problem, according to thepost, PacketTunnelProvider can only proxy HTTP.

You are mixing up your layers here. A packet tunnel provider is connected at the IP layer, so it receives IP packets. In addition, any VPN can configure a set of custom proxies that apply when the VPN becomes the primary interface. If the VPN does that then HTTP[S] clients will use those proxies. However, the IP traffic generated by the HTTP[S] requests going to the proxy will still pass through the packet tunnel provider [1].

Share and Enjoy
—
Quinn “The Eskimo!”
Apple Developer Relations, Developer Technical Support, Core OS/Hardware

let myEmail = "eskimo" + "1" + "@apple.com"

[1] Assuming they are routed via the default route. If the IP address of the proxy happens to hit a specific route — for example, a locally attached network, or a network that your provider has specifically excluded using the

excludedRoutes

If NEIPv4Settings.includedRoutes uses [NEIPv4Route defaultRoute], in -readPacketObjectsWithCompletionHandler: whether it is ip data read from the entire tunnel, including UDP, TCP?

I’m sorry but I can’t parse that question.

Share and Enjoy
—
Quinn “The Eskimo!”
Apple Developer Relations, Developer Technical Support, Core OS/Hardware

let myEmail = "eskimo" + "1" + "@apple.com"

I’m sorry, It can be my uncle's unclearness. I mean, if the includedRoutes attribute uses [NEIPv4Route defaultRoute], does it mean that all data on the phone will enter the tunnel?

if the

includedRoutes

attribute uses

[NEIPv4Route defaultRoute]

, does it mean that all data on the phone will enter the tunnel?

Kinda. This causes the default route to switch to your VPN interface (it becomes the primary interface), and thus most traffic will be routed via your provider. However, there are exceptions, including:

• Traffic generated by your provider (for obvious reasons)

• Traffic for locally-connected networks

• Traffic that targets a specific interface

Share and Enjoy
—
Quinn “The Eskimo!”
Apple Developer Relations, Developer Technical Support, Core OS/Hardware

let myEmail = "eskimo" + "1" + "@apple.com"

Thank you very much, I can read the data now.

But in the data I read, how do I split the header of an ip packet? For example, printing the header of UDP data in the console.

iOS does not have APIs for parsing IP packets. You’ll have to write this yourself (or use some third-party library).

Share and Enjoy
—
Quinn “The Eskimo!”
Apple Developer Relations, Developer Technical Support, Core OS/Hardware

let myEmail = "eskimo" + "1" + "@apple.com"