Transparent proxy breaks apps on macOS 15.7.8 RC 5

Question

Created 4d

Replies 6

Boosts 0

Participants 4

Hello!

Users of my app observed behaviour that some apps stopped working after update to 15.7.8 via Beta channel with transparent proxy network extension on.

The app receives Protocol not available error, and I see setsockopt SO_FLOW_DIVERT_TOKEN failed [42: Protocol not available] error in Console.

To reproduce, create two rules in basic NETransparentProxyProvider:

        [[NENetworkRule alloc] initWithDestinationNetwork:nil prefix:0 protocol:NENetworkRuleProtocolTCP],
        [[NENetworkRule alloc] initWithDestinationNetwork:nil prefix:0 protocol:NENetworkRuleProtocolUDP],

You may even return NO in handleNewFlow, it does not matter.

After that, Safari won't open some sites, and Weather app will work unreliably.

Do anyone knows any workaround for this problem?

I've also create a relevant FB23788740.

Answer 1

DTS Engineer OP

Apple

3d

Just to confirm:

You have an existing transparent proxy product.
macOS 15 users will able to successfully use your product up to and including macOS 15.7.7.
Once they update to 15.7.8 RC, they hit this problem.

Is that accurate?

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

Answer 2

fionov OP

3d

Yes, this is accurate. No problems were on 15.7.7.

Answer 3

captaingecko OP

3d

I am also seeing this on the 15.7.8 beta after updating to the 24G817 build specifically (issue was not present on the previous 15.7.8 build).

Web search on this problem brought me to this thread, as well as other mentions that the 24G817 build broke Norton 360's Transparent Proxy, blocking Safari, update checks as well as most other (but not all) network traffic, which is the same behaviour I am seeing.

Answer 4

DTS Engineer OP

Apple

14h

Yes, this is accurate.

Cool. And FB23788740 is your bug about this, right?

I am also seeing this on the 15.7.8 beta

Are you the author of the affected transparent proxy? Or someone using a transparent proxy created by another third-party developer?

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

Answer 5

captaingecko OP

12h

Are you the author of the affected transparent proxy? Or someone using a transparent proxy created by another third-party developer?

I'm just a user of a transparent proxy by another third-party developer.

Whilst trying to debug why 24G817 had broken my internet access led me to this thread, so just wanted to confirm it, and also add that it was something about that specific build in particular that had broken it, as the transparent proxy had been working just fine on the previous 15.7.8 beta builds.

Answer 6

jimmyorz OP

11h

As a follow-up, the issue still occurs on the newly released macOS 15.7.8 (24G822).

Just a user of a transparent proxy.