Per-App VPN

Question

Created Jun ’25

Replies 2

Boosts 0

Participants 2

Hi all, im trying to implement a per-app vpn in my network extension (packet tunnel with custom protocol), where only the traffic generated by my application should be routed trought my network extension. It is possible to accomplish that on a non managed or supervised device?

Setting the routingMethod as .sourceApplication in NEPacketTunnelProvider is not possible as it is read-only, can it work trying overriding the var as a computed property?

The documentation lack of examples.

Thanks in advance! Love

Boost

Answer 1

DTS Engineer OP

Apple

Jun ’25

Accepted Answer

Recommended

It is possible to accomplish that on a non managed or supervised device?

Are talking iOS here? If so, the answer to the above is “No.”

On to be clear, supervision isn’t a factor here. What matters is that the device be managed [1], because MDM is how you you set the VPNUUID property on the app so that matches up with the VPNUUID property on the VPN configuration.

For detailed info on NE provider distribution options, see TN3134 Network Extension provider deployment.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

[1] Except during development, where you can take advantage of NETestAppMapping.

1

Answer 2

ginofromgenova OP

Jun ’25

Hi Eskimo, Yes, im talking about iOS.

Thanks again for the answer!

0