iCloud private relay and overhead from IPsec

Hello, I am a tech guy.

I have a site-to-site IPsec tunnel connection two gateways. Behind one of them is my Mac. I found iCloud private relay still send me packets larger than expected. For instance, according to my testing via Scapy, my TCP packets can have a MTU of 1280, given IPsec tunnel is activated. Also, ICMP showed a maximum payload of 1252.

I have tried to reduce my Mac's MTU from 1500 to 1280. But still, iCloud private relay servers send me packets larger than 1280, according to tcpdump captured data.

Therefore, I wonder, are there any ways to make both iCloud private relay and IPsec work at the same time. Thanks.

Answered by DTS Engineer in 897607022

I’m gonna give you pretty much the same answer I gave on your other thread: The Apple Developer Forums are primarily focused on code-level issues and we can’t really help you with other stuff.

Now, it’s possible that someone else might chime in here, but my general advice is that you hold these discussions on Apple Support Community, run by Apple Support.

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

I’m gonna give you pretty much the same answer I gave on your other thread: The Apple Developer Forums are primarily focused on code-level issues and we can’t really help you with other stuff.

Now, it’s possible that someone else might chime in here, but my general advice is that you hold these discussions on Apple Support Community, run by Apple Support.

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

iCloud private relay and overhead from IPsec
 
 
Q