<!--
{
  "availability" : [
    "iOS: 9.0.0 -",
    "iPadOS: 9.0.0 -",
    "macCatalyst: 13.1.0 -",
    "macOS: 10.11.0 -",
    "tvOS: 17.0.0 -",
    "visionOS: 1.0.0 -"
  ],
  "documentType" : "symbol",
  "framework" : "NetworkExtension",
  "identifier" : "/documentation/NetworkExtension/NETunnelProvider/protocolConfiguration",
  "metadataVersion" : "0.1.0",
  "role" : "Instance Property",
  "symbol" : {
    "kind" : "Instance Property",
    "modules" : [
      "Network Extension"
    ],
    "preciseIdentifier" : "c:objc(cs)NETunnelProvider(py)protocolConfiguration"
  },
  "title" : "protocolConfiguration"
}
-->

# protocolConfiguration

The configuration of the current tunneling session.

```
var protocolConfiguration: NEVPNProtocol { get }
```

## Discussion

The configuration is created by the containing app of the Tunnel Provider using the [`NETunnelProviderManager`](/documentation/NetworkExtension/NETunnelProviderManager) class, or by the ingestion of a `com.apple.vpn.managed` or a `com.apple.vpn.managed.applayer` configuration profile payload. See the [`NETunnelProviderManager`](/documentation/NetworkExtension/NETunnelProviderManager) class for more details.

For [`NEPacketTunnelProvider`](/documentation/NetworkExtension/NEPacketTunnelProvider) subclasses and [`NEAppProxyProvider`](/documentation/NetworkExtension/NEAppProxyProvider) subclasses, this property will be set to a [`NETunnelProviderProtocol`](/documentation/NetworkExtension/NETunnelProviderProtocol) object.

`NETunnelProvider` subclasses can observe this property using KVO to be notified when the configuration changes. For details see [Key-Value Observing Programming Guide](https://developer.apple.com/library/archive/documentation/Cocoa/Conceptual/KeyValueObserving/KeyValueObserving.html#//apple_ref/doc/uid/10000177i).

---

Copyright &copy; 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)