Requesting Network Extension Capability

One thing I wanted to confirm, suppose i submit one request to onboard OHTTP relay for one organisation app and it gets approved, so can I re submit the request with different bundle ID for other organisation and same PIR server, same OHTTP server ? Or do we need different domain name ?

Answered by DTS Engineer in 890211022

Both myself and the person I’m talking with are buried in WWDC preparation right now.

Thanks to a timely reminder from Quinn, I managed to pull my head up long enough to get an answer sorted out..

One thing I wanted to confirm, suppose i submit one request to onboard OHTTP relay for one organisation app and it gets approved, so can I re submit the request with different bundle ID for other organisation and same PIR server, same OHTTP server ? Or do we need different domain name ?

A lot of this depends on exactly what's being shared and way:

  • If this is multiple apps from the same development team, then it's fine for all of those teams to use exactly the same configuration and infrastructure.

  • If exactly the same data is being used by multiple development teams, then the team would prefer that each team have their own host names even if the underlying infrastructure is exactly the same. That is, you could do something like "team-a.vendor.com" and "team-b.vendor.com", with both of those DNS records actually pointing to the same underlying server infrastructure.

Note that this assumes that these apps will specifically be working of EXACTLY the same underlying data. If the data sets for individual teams are going to diverge, then you may want to use separate PIR servers to ensure that the datasets are strongly separated.

__
Kevin Elliott
DTS Engineer, CoreOS/Hardware

I think I know the answer here, but I wanna check before I say anything definitive. I’ll get back to you on this.

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

any update @DTS Engineer

any update

Not really. I have a reminder to come back to this, but that’ll likely be after WWDC. Both myself and the person I’m talking with are buried in WWDC preparation right now.

Alternatively, you could ask this in the Networking Q&A during WWDC. It’s likely that the relevant folks will be there. See the link on Developer > WWDC26 > Schedule > Forums.

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

Both myself and the person I’m talking with are buried in WWDC preparation right now.

Thanks to a timely reminder from Quinn, I managed to pull my head up long enough to get an answer sorted out..

One thing I wanted to confirm, suppose i submit one request to onboard OHTTP relay for one organisation app and it gets approved, so can I re submit the request with different bundle ID for other organisation and same PIR server, same OHTTP server ? Or do we need different domain name ?

A lot of this depends on exactly what's being shared and way:

  • If this is multiple apps from the same development team, then it's fine for all of those teams to use exactly the same configuration and infrastructure.

  • If exactly the same data is being used by multiple development teams, then the team would prefer that each team have their own host names even if the underlying infrastructure is exactly the same. That is, you could do something like "team-a.vendor.com" and "team-b.vendor.com", with both of those DNS records actually pointing to the same underlying server infrastructure.

Note that this assumes that these apps will specifically be working of EXACTLY the same underlying data. If the data sets for individual teams are going to diverge, then you may want to use separate PIR servers to ensure that the datasets are strongly separated.

__
Kevin Elliott
DTS Engineer, CoreOS/Hardware

@DTS Engineer So is it a restriction from apple side that is gone block/reject this entitlement request or is it a suggestion from your end in order to reduce the complexity and inter dependency.

So is it a restriction from apple side that is gone block/reject this entitlement request or is it a suggestion from your end in order to reduce the complexity and inter dependency.

I'm not sure why you're asking that. The data seperation requirement is fairly trivial (just make a new DNS entry and your done), so I'm not sure why it would be an issue. I honestly don't know how it would be handled during the entitlement process, but I expect they'd just ask for you to change it.

__
Kevin Elliott
DTS Engineer, CoreOS/Hardware

Requesting Network Extension Capability
 
 
Q