Control and Data Filter Network Extension Restricts the First Network Calls

We have developed ControlFilter and DataFilter Network Extension to monitor the network flow.

We are seeing one strange behaviour - Whenever we launch the Safari then default page coming as "you cannot browse this page at "<<url>>" because it is restricted"

We have modified the code and kept both the filters in passthrough mode that is returning Allow verdict by-default but still seeing same issue.

Once we reload the webpage then able to load the web content.

Note: Issue is only observed on Safari and working fine with Chrome and Edge.


When this issue takes places, can you confirm that DNS is going through on the iOS device for the first request? If not, then this sounds like a bug. If it is, you may want to take a look in the console logs for other clues as to what is happening.


Matt Eaton
DTS Engineering, CoreOS
meaton3@apple.com
@Matt Eaton Looks like this is an issue and we have reported same to Apple (https://feedbackassistant.apple.com/feedback/9070521), When do we get fix of this issue, any ETA?
Control and Data Filter Network Extension Restricts the First Network Calls
 
 
Q