PayloadKit

DNS Proxy

com.apple.dnsProxy.managed

The payload that configures DNS proxies.

iOS 11.0+ · deprecated 27.0macOS 10.15+ · deprecated 27.0visionOS 1.1+ · deprecated 27.0
Apple schemacombined

Only one instance per profile · macOS: device channel only

Configuration Keys (5)

KeyTypeDescriptionDefaultRange

App bundle identifier

required
stringThe bundle identifier of the app containing the DNS proxy network extension.Default: —Range: —

Provider bundle identifier

stringThe bundle identifier of the DNS proxy network extension to use. Declaring the bundle identifier is useful for apps that contain more than one DNS proxy extension.Default: —Range: —

Provider Custom Configuration

dictThe dictionary of vendor-specific configuration items.Default: —Range: —
{{key}}string
string—Default: —Range: —
{{value}}string
stringKey/value pairs.Default: —Range: —

DNS proxy UUID

iOS 16.0+ · not on macOS

stringA globally unique identifier for this DNS proxy configuration. The proxy processes DNS lookups traffic for managed apps with the same 'DNSProxyUUID' in their app attributes. This key is required for user enrollment.Default: —Range: —

Provider designated requirement

not on iOS, visionOS

stringThe designated requirement string that the system embeds in the code signature of the DNS proxy network extension. Use this to correctly identify the DNS proxy extension when 'ProviderBundleIdentifier' is present.Default: —Range: —