1

add “excluded domains” as well as excluded wifi for the NextDNS iOS app

I think the subject is self explanatory. I tend to add excluded domains for the mobileconfig profile but if we can add them using app on the go then that’s great! 

5 replies

null
    • NextDNs
    • 3 mths ago
    • Reported - view

    iOS APIs do not provide this feature unfortunately.

      • Yog
      • 7 days ago
      • Reported - view

       

      Apple’s current Network Extension documentation appears to explicitly support excluded domains for native encrypted DNS configurations.

      The documentation for NEDNSSettingsManager.onDemandRules states that NEOnDemandRuleEvaluateConnection can configure excluded domains using NEEvaluateConnectionRuleAction.neverConnect.

      Is this API unsuitable for NextDNS’s implementation? Or is the limitation specific to the app’s current local VPN/DNS proxy architecture rather than to iOS APIs in general?

      Apple documentation:
      https://developer.apple.com/documentation/networkextension/nednssettingsmanager/ondemandrules

      • NextDNs
      • 19 hrs ago
      • Reported - view

       it’s a limite to their API for native apps implementing encrypted dns

    • Yog
    • 17 hrs ago
    • Reported - view

     
    The current Apple documentation still exposes NEDNSSettingsManager.onDemandRules, NEOnDemandRuleEvaluateConnection.connectionRules, and NEEvaluateConnectionRuleAction.neverConnect, with none of them marked as deprecated.

    Apple’s WWDC20 “Enable encrypted DNS” session explicitly demonstrates per-domain exceptions in a native encrypted DNS app using NEDNSSettingsManager, NEOnDemandRuleEvaluateConnection, and NEEvaluateConnectionRule(..., .neverConnect)- around 6:40:
    https://developer.apple.com/videos/play/wwdc2020/10047/

    Apple describes the result as the matched domain not using the app’s DNS settings, and even states that DNS Settings apps should allow users to configure these rules.

      • NextDNs
      • 15 hrs ago
      • Reported - view

       we’ll double check this, thanks for the pointer. That would be awesome if it works.

Login to reply

Content aside

  • 1 Votes
  • 15 hrs agoLast active
  • 5Replies
  • 42Views
  • 3 Following