My requirement is that when iOS users use my VPN to visit some apps, they will not access it through the VPN proxy server I set. I have tried many ways but failed. Is it feasible to set excludedRoutes to solve it?
How can I use excludedRoutes in Network Extension to filter some certain apps that users are about to access
Is it feasible to set excludedRoutes to solve it?
In theory, yes, excluding routes from the tunnel should work using the excludedRoutes API, but this should also work if you have a split tunnel setup to only claim a subset of the destination IP on your device. For example if you have a business case for only claiming a handful of IPs then setting up your tunnel to claim these specific destination IPs should only tunnel them by default too.
Thank you very much for your reply. From my attempts these days I found that the excludedRoutes API didn't work for my needs
My requirement is: while the user is using my VPN tunnel proxy connection Settings, when they open some apps, they will not use the APP via my VPN tunnel proxy, but the real network environment under their device Can this be done through other API in the Network Extension? This function is extremely important for our APP, hope to get your help! thanks again!
Can this be done through other API in the Network Extension?
Check out the section for Routing Network Data to the VPN. There is the destination IP routing option and for an MDM scenario, there is the per-app VPN option.