Packet Tunnel Provider entitlement

Hello,

I submitted a Network Extension entitlement request (Packet Tunnel Provider) and opened case 102837721995.

The case history says Apple sent a message on March 12, but I did not receive it and cannot reply through the support portal.

Could someone from Apple Developer Support check the case?

Also, it is possible that I misunderstood something or submitted the wrong entitlement request. My application will use WireGuard to establish the VPN connection. If a different entitlement is required for this scenario, please let me know.

Thank you.

Answered by DTS Engineer in 880266022

There is no approval process for creating an NE packet tunnel provider [1]. Any paid developer can do that [2].

Why do you think that such an approval is necessary?

If you’re using Xcode, you should be able to add the Network Extension capability to your app and appex, check the Packet Tunnel box, and let its automatic code signing handle the rest. But you’re the second person to ask a question like this recently [3], suggesting that something is misleading folks. I’d like to find that and fix it.

ps Some NE providers have deployment restrictions. See TN3134 Network Extension provider deployment for the details. Also, don’t try to use a packet tunnel provider for something other than VPN. See TN3120 Expected use cases for Network Extension packet tunnel providers.

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

[1] Other than approval to join the Apple Developer Program itself.

[2] That wasn’t always the case. See Network Extension Framework Entitlements for some history and some edge cases.

[3] See this thread.

There is no approval process for creating an NE packet tunnel provider [1]. Any paid developer can do that [2].

Why do you think that such an approval is necessary?

If you’re using Xcode, you should be able to add the Network Extension capability to your app and appex, check the Packet Tunnel box, and let its automatic code signing handle the rest. But you’re the second person to ask a question like this recently [3], suggesting that something is misleading folks. I’d like to find that and fix it.

ps Some NE providers have deployment restrictions. See TN3134 Network Extension provider deployment for the details. Also, don’t try to use a packet tunnel provider for something other than VPN. See TN3120 Expected use cases for Network Extension packet tunnel providers.

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

[1] Other than approval to join the Apple Developer Program itself.

[2] That wasn’t always the case. See Network Extension Framework Entitlements for some history and some edge cases.

[3] See this thread.

Packet Tunnel Provider entitlement
 
 
Q