Come on now, this can't be your solution...
We have to setup clean secondary Macs to test this?
And the following is just icing on the cake:
If your VPN product or security configuration uses PF to filter network packets, update your PF rules to allow traffic on the network interfaces Xcode uses for device communication. These rules need to be continuously updated, as the network interfaces Xcode uses to communicate with a connected device changes over time.
To monitor for network interface changes, use NWPathMonitor, or create a nw_path_monitor_t through nw_path_monitor_create(). Each time the path monitor notifies you that the network interfaces changed, use ioctl with a SIOCGIFDIRECTLINK request to identify the multiple network interfaces Xcode uses for device connection traffic. The system marks these interfaces with the ifr_is_directlink flag. Configure your PF rules to allow any IPv6 traffic on interfaces marked with this flag through the filter.
Can someone translate this?
I used to be able to use Xcode with physical devices attached while on VPN with no problems. Now I have to do all these crazy experiments?