Does iOS provide any APIs that can be used to create a route statically as done in MAC OS.

Question

Created Sep ’21

Replies 2

Boosts 0

Participants 2

We are trying to figure out a way to find an API that can programatically help adding/deleting a routing address into/from a route table.

In MAC, this operation is achieved by providing "route" commands in the terminal. Eg. route -n add -net

We make use on NE PacketTunnelProvider for creating the tun interface were we can provide IPv4 routes. However at a later point of time we need to add routes as well. Do we have any provision from iOS that can be used to create route statically as done in MAC.

Answered by DTS Engineer in 690240022

only from within the NE

Yes.

when we “Start” the VPN Tunnel

No. You must call it to start the tunnel but you can call it again to update the tunnel’s settings.

From the APP layer if I need to pass the new Route address Information (when the VPN connection is already up and running), will the current VPN connection get impacted ?

Yes, assuming that the provider applies the settings.

There are two standard ways to share state between your app and your provider:

If the state is transient, use provider messaging. The app calls sendProviderMessage(_:responseHandler:) and the system calls handleAppMessage(_:completionHandler:) on the provider.
If you want the state to persist, put it in the providerConfiguration. If the apps save a configuration while the tunnel is running, the tunnel can learn about this via a KVO observation on its protocolConfiguration property.

Once your provider learns about the new configuration, it should then call setTunnelNetworkSettings(_:completionHandler:) to apply the state.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

Boost

Answer 1

DTS Engineer OP

Apple

Oct ’21

We make use on NE packet tunnel provider for creating the tun interface were we can provide IPv4 routes. However at a later point of time we need to add routes as well.

To do this, call setTunnelNetworkSettings(_:completionHandler:) with the new settings.

You should use this technique on the Mac as well; changing the routing table behind the back of the Network Extension / System Configuration framework infrastructure is likely to cause problems.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

0

Answer 2

DTS Engineer OP

Apple

Oct ’21

Accepted Answer

only from within the NE

Yes.

when we “Start” the VPN Tunnel

No. You must call it to start the tunnel but you can call it again to update the tunnel’s settings.

From the APP layer if I need to pass the new Route address Information (when the VPN connection is already up and running), will the current VPN connection get impacted ?

Yes, assuming that the provider applies the settings.

There are two standard ways to share state between your app and your provider:

If the state is transient, use provider messaging. The app calls sendProviderMessage(_:responseHandler:) and the system calls handleAppMessage(_:completionHandler:) on the provider.
If you want the state to persist, put it in the providerConfiguration. If the apps save a configuration while the tunnel is running, the tunnel can learn about this via a KVO observation on its protocolConfiguration property.

Once your provider learns about the new configuration, it should then call setTunnelNetworkSettings(_:completionHandler:) to apply the state.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

0