Understanding NSAllowsLocalNetworking exceptions for private IP addresses over VPN or tethered networks
0 reputation · 29 Sept 2023, 11:24 UTC
Goal: Verify whether enabling the NSAllowsLocalNetworking key in an app’s Info.plist allows URLSession requests to reach private IP addresses when the device is connected through a VPN or a tethered interface.
Constraints: ATS remains active for all other domains, the app must comply with App Store guidelines, and the behavior may vary across iOS releases where the documentation notes that the exception does not cover private IP ranges accessed via VPN or tethered interfaces on some versions.
Uncertainty: The exact iOS versions and conditions under which NSAllowsLocalNetworking fails to exempt such traffic are not specified, leaving developers unsure if additional keys or workaround configurations are required.
Specific questions:
- On which iOS versions does NSAllowsLocalNetworking permit private‑IP traffic over VPN connections?
- Does the same exemption apply when the device uses a tethered (personal hotspot) interface?
- Are there any supplementary Info.plist keys or network‑framework settings that can reliably allow this traffic while keeping ATS enabled for other hosts?