Hi everyone, I’m looking for some clarification regarding "Transparent Proxy configurations on macOS".
We have a requirement where multiple security/networking solutions may need to use a "Transparent Proxy" on the same macOS device. For example, one solution may be used for web security/SSL inspection while another solution is required for a different security or network traffic use case.
My questions are:
1.Does macOS support configuring and running multiple Transparent Proxy providers simultaneously on the same device? 2. If multiple Transparent Proxy configurations are deployed through MDM, how does macOS determine which proxy handles the traffic? 3.Is there any limitation on the number of Transparent Proxy configurations/providers that can be configured? 4.Can multiple Transparent Proxy providers coexist if they handle different traffic, applications, or network interfaces? 5. If multiple providers are configured, is there a supported mechanism to define priority, ordering, or traffic routing between them? 6. Are there any differences or limitations across recent macOS versions, particularly macOS 15 and macOS 26? 7. Is there any Apple documentation or recommended architecture for deploying multiple Transparent Proxy providers on the same Mac?
If anyone has implemented or tested a setup with multiple Transparent Proxy providers on macOS, I’d appreciate any insights, documentation, or real-world experience.
Thanks! Vijay
1- Does macOS support configuring and running multiple Transparent Proxy providers simultaneously … ?
Yes.
2- If multiple Transparent Proxy configurations are deployed through MDM, how does macOS determine which proxy handles the traffic?
Each provider declares the traffic it wants to see. Once the system see a matching network flow, it passes that to the provider which decides whether it wants to claim it or not. If it doesn’t claim it, the system acts like that provider wasn’t installed. It it does claim it, then the flow disappears into the provider. If the provider makes its own outgoing network connections, those connections will be seen by subsequent providers.
I’d be happy to go into more detail at the API level, but I suspect that you’re coming at this from the sysadmin level. I can’t help you with that. My focus is on helping developers use our APIs to build providers, not on how those providers get deployed.
3- Is there any limitation on the number of Transparent Proxy configurations/providers that can be configured?
Yes. See this thread.
4- Can multiple Transparent Proxy providers coexist if they handle different traffic, applications, or network interfaces?
Yes. They can even coexist if the handle the same flows.
Having said that, it’s easy for incompatibilities to crop up here. Some of them are just bugs (bugs in the system and bugs in the providers) but some are fundamental.
5- If multiple providers are configured, is there a supported mechanism to define priority, ordering, or traffic routing between them?
Yes. See this thread.
Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"
