599efc349fa3

iOS NetworkExtension.FrameWork

2019-01-02  本文已影响85人  天下林子

NetworkExtension

  1. NEAppProxyTCPFlow

  2. NEAppProxyUDPFlow

  3. NEAppProxyFlow

NEAppProxyFlow

管理流程的生命周期

/*
* This header is generated by classdump-dyld 0.1
* on Wednesday, September 20, 2017 at 9:28:09 PM Eastern European Summer Time
* Operating System: Version 11.0 (Build 15A372)
* Image Source: /System/Library/Frameworks/NetworkExtension.framework/NetworkExtension
* classdump-dyld is free of use, Copyright © 2013 by Elias Limneos.
*/


@protocol OS_dispatch_queue;
#import <NetworkExtension/NetworkExtension-Structs.h>
@class NEFlowMetaData, NSObject, NSData;

@interface NEAppProxyFlow : NSObject {

    NEFlowMetaData* _metaData;
    NEFlowRef _flow;
    NSObject<OS_dispatch_queue>* _queue;

}

@property (assign) NEFlowRef flow;                               //@synthesize flow=_flow - In the implementation block
@property (retain) NSObject<OS_dispatch_queue>* queue;           //@synthesize queue=_queue - In the implementation block
@property (retain) NSData* applicationData; 
@property (readonly) NEFlowMetaData* metaData;                   //@synthesize metaData=_metaData - In the implementation block
+(id)flowErrorForVPNFlowError:(long long)arg1 ;
+(CFErrorRef)copyVPNFlowErrorFromFlowError:(id)arg1 ;
-(void).cxx_destruct;
-(void)dealloc;
-(unsigned long long)hash;
-(id)queue;
-(void)setQueue:(id)arg1 ;
-(NEFlowRef)flow;
-(void)clearEventHandlers;
-(id)initWithNEFlow:(NEFlowRef)arg1 queue:(id)arg2 ;
-(void)openWithLocalEndpoint:(id)arg1 completionHandler:(/*^block*/ id)arg2 ;
-(void)closeReadWithError:(id)arg1 ;
-(void)closeWriteWithError:(id)arg1 ;
-(void)setFlow:(NEFlowRef)arg1 ;
-(id)metaData;
-(void)setApplicationData:(id)arg1 ;
-(id)applicationData;
@end

NEAppProxyTCPFlow

NEAppProxyTCPFlow 继承自NEAppProxyFlow
NEAppProxyTCPFlow 用于从应用程序代理提供程序代理的TCP套接字中读取数据和将数据写入该套接字，应用程序代理服务器以NEAppProxyTCPFlow对象的形式接受TCP代理。

处理流量数据


- writeData:withCompletionHandler:


- readDataWithCompletionHandler:

获取流量信息

remoteEndpoint
一个NWEndPoint 对象，其中包含有关流的预期远程端点的信息。

NEAppProxyUDPFlow

官方文档


NEAppProxyUDPFlow is used to read data from and write data to a UDP socket that is being proxied by an App Proxy Provider.

NEAppProxyUDPFlow用于从应用程序代理提供程序代理的UDP套接字读取数据和写入数据。

读取信息流数据

写入信息流数据

获取信息流信息
localEndPoint

/*
* This header is generated by classdump-dyld 0.1
* on Wednesday, September 20, 2017 at 9:28:09 PM Eastern European Summer Time
* Operating System: Version 11.0 (Build 15A372)
* Image Source: /System/Library/Frameworks/NetworkExtension.framework/NetworkExtension
* classdump-dyld is free of use, Copyright 漏 2013 by Elias Limneos.
*/

#import <NetworkExtension/NetworkExtension-Structs.h>
#import <NetworkExtension/NEAppProxyFlow.h>

@class NWEndpoint;

@interface NEAppProxyUDPFlow : NEAppProxyFlow {

    NWEndpoint* _localEndpoint;

}

@property (readonly) NWEndpoint* localEndpoint;           //@synthesize localEndpoint=_localEndpoint - In the implementation block
-(void).cxx_destruct;
-(id)description;
-(id)initWithNEFlow:(NEFlowRef)arg1 queue:(id)arg2 ;
-(void)openWithLocalEndpoint:(id)arg1 completionHandler:(/*^block*/ id)arg2 ;
-(id)localEndpoint;
-(void)readDatagramsWithCompletionHandler:(/*^block*/ id)arg1 ;
-(void)writeDatagrams:(id)arg1 sentByEndpoints:(id)arg2 completionHandler:(/*^block*/ id)arg3 ;
@end

利用Network Extension 改Host
https://www.jianshu.com/p/bac67bee0431

++++++++++++++++++++++++++++++

4. NEAppProxyProvider

5. NEAppProxyProviderManager

6. NEAppRule

NEAppProxyProvider

DNS处理

除了来自应用程序的原始网络数据流之外，App Proxy Provider还可以从NEAppProxyUDPFlow对象的形式接收DNS查询流。仅对使用低级DNS解析API(例如DNSServiceGetAddrInfo())的应用程序接收DNS查询流。App Proxy Provider可以使用setTunnelNetworkSettings:completionHandler:方法指定这些应用程序将使用的DNS解析器配置。
使用更高级网络API(如NSURLSession何NSURLConnection)的应用程序不会生成DNS查询。而是链接的目标主机名包含在NEAppProxyFlow对象的端点信息中。

创建App Proxy Provider扩展

App Proxy Provider以com.apple.networkextension.app-proxy扩展指示App Extensions运行。

要创建App Proxy Provider扩展，请先在项目中创建一个新的App Extension目标。

一旦你有一个App Proxy Provider扩展目标，创建一个NEAppProxyProvider的子类。然后，将扩展后的info.plist中的NSExtensionPrincipalClass键设置为子类的名称。

如果尚未完成，请将扩展名的info.plist中的NSExtensionPointIdentifier键设置为com.apple.networkextension.app-proxy，如下图：

<key>NSExtension</key>
<dict>
    <key>NSExtensionPointIdentifier</key>
    <string>com.apple.networkextension.app-proxy</string>
    <key>NSExtensionPrincipalClass</key>
    <string>MyCustomAppProxyProvider</string>
</dict>

最后，将App Proxy Provider 扩展目标添加到应用程序的"嵌入应用程序扩展"构建阶段。

子类注释
为了创建App Proxy Provider扩展，你必须创建NEAppProxyProvider的子类，并覆盖下列方法。

startProxyWithOptions:completionHandler:

启动网络代理

stopProxyWithReason:completionHandler:

停止网络代理

handleNewFlow:

从App Proxy Provider停止网络代理，并且该方法可以处理新的网络数据流

NEAppProxyProviderManager

管理应用程序代理配置

NEAppRule

NEAppRule包含用于根据源应用程序匹配网络链接的规则的匹配条件。

相关的API

- initWithSigningIdentifier:

创建一个与具有给定签名标识符的应用程序相匹配的应用规则。

- initWithSigningIdentifier:designatedRequirement:

创建一个与具有给定签名标识符和给定指定要求的应用程序相匹配的应用规则

AppRule配置参数

matchSigningIdentifier

与规则匹配的应用程序的签名标识符

matchDesignatedRequirement

与规则匹配的应用程序的指定要求

matchPath

与规则匹配的应用程序的文件系统路径


matchDomains

与规则匹配的主机名域。

头文件

/*
* This header is generated by classdump-dyld 1.0
* on Thursday, December 22, 2016 at 6:08:29 PM Eastern European Standard Time
* Operating System: Version 10.1.1 (Build 14B100)
* Image Source: /System/Library/Frameworks/NetworkExtension.framework/NetworkExtension
* classdump-dyld is licensed under GPLv3, Copyright 漏 2013-2016 by Elias Limneos.
*/

#import <NetworkExtension/NetworkExtension-Structs.h>
#import <libobjc.A.dylib/NEConfigurationValidating.h>
#import <libobjc.A.dylib/NEPrettyDescription.h>
#import <libobjc.A.dylib/NEConfigurationLegacySupport.h>
#import <libobjc.A.dylib/NSSecureCoding.h>
#import <libobjc.A.dylib/NSCopying.h>

@class NSString, NSArray;

@interface NEAppRule : NSObject <NEConfigurationValidating, NEPrettyDescription, NEConfigurationLegacySupport, NSSecureCoding, NSCopying> {

    BOOL _noRestriction;
    BOOL _noDivertDNS;
    NSString* _matchSigningIdentifier;
    NSString* _matchDesignatedRequirement;
    NSString* _matchPath;
    NSArray* _matchDomains;
    NSArray* _additionalExecutables;
    NSArray* _matchAccountIdentifiers;

}

@property (copy) NSArray * additionalExecutables;                        //@synthesize additionalExecutables=_additionalExecutables - In the implementation block
@property (assign) BOOL noRestriction;                                   //@synthesize noRestriction=_noRestriction - In the implementation block
@property (copy) NSArray * matchAccountIdentifiers;                      //@synthesize matchAccountIdentifiers=_matchAccountIdentifiers - In the implementation block
@property (assign) BOOL noDivertDNS;                                     //@synthesize noDivertDNS=_noDivertDNS - In the implementation block
@property (readonly) NSString * matchSigningIdentifier;                  //@synthesize matchSigningIdentifier=_matchSigningIdentifier - In the implementation block
@property (readonly) NSString * matchDesignatedRequirement;              //@synthesize matchDesignatedRequirement=_matchDesignatedRequirement - In the implementation block
@property (copy) NSString * matchPath;                                   //@synthesize matchPath=_matchPath - In the implementation block
@property (copy) NSArray * matchDomains;                                 //@synthesize matchDomains=_matchDomains - In the implementation block
+(BOOL)supportsSecureCoding;
-(id)initWithCoder:(id)arg1 ;
-(void)encodeWithCoder:(id)arg1 ;
-(id)copyWithZone:(NSZone*)arg1 ;
-(BOOL)checkValidityAndCollectErrors:(id)arg1 ;
-(id)descriptionWithIndent:(int)arg1 options:(unsigned long long)arg2 ;
-(id)copyLegacyDictionary;
-(NSString *)matchSigningIdentifier;
-(id)initFromLegacyDictionary:(id)arg1 ;
-(NSArray *)matchDomains;
-(void)setMatchDomains:(NSArray *)arg1 ;
-(BOOL)overlapsWithRule:(id)arg1 ;
-(NSArray *)additionalExecutables;
-(id)initWithSigningIdentifier:(id)arg1 ;
-(NSString *)matchPath;
-(void)setMatchPath:(NSString *)arg1 ;
-(NSArray *)matchAccountIdentifiers;
-(void)setMatchAccountIdentifiers:(NSArray *)arg1 ;
-(BOOL)noRestriction;
-(void)setNoRestriction:(BOOL)arg1 ;
-(void)setNoDivertDNS:(BOOL)arg1 ;
-(BOOL)noDivertDNS;
-(BOOL)signingIdentifierAllowed:(id)arg1 domainsRequired:(out BOOL*)arg2 ;
-(NSString *)matchDesignatedRequirement;
-(void)setAdditionalExecutables:(NSArray *)arg1 ;
@end
  1. NEDNSProxyManager
  2. NEDNSProxyProvider
  3. NEDNSProxyProviderProtocol
  4. NEDNSSettings

NEDNSProxyManager

相关API

创建一个DNS代理的单例

+sharedManager

加载一个DNS代理的配置的回调

- (void)loadFromPreferencesWithCompletionHandler:(void (^)(NSError *error))completionHandler;

保存一个DNS代理的completionHandler


- (void)saveToPreferencesWithCompletionHandler:(void (^)(NSError *error))completi   onHandler;

移除


- (void)removeFromPreferencesWithCompletionHandler:(void (^)(NSError *error))completionHandler;

NEDNSProxyProvider

相关API


- (void)startProxyWithOptions:(NSDictionary<NSString *,id> *)options 
            completionHandler:(void (^)(NSError *error))completionHandler;




- (void)stopProxyWithReason:(NEProviderStopReason)reason 
          completionHandler:(void (^)(void))completionHandler;


- (void)cancelProxyWithError:(NSError *)error;
image.png image.png
image.png

配置证书的时候，要创建两个bundle ID 同时要有两个证书

image.png

第二个证书的格式应该是app的Target的Bundle ID + 扩展的target名字


image.png

参考
How to use NEDNSProxyProvider in iOS 11

iOS11中网络层的一些变化(Session707&709脱水版)

利用Network Extension 改Host

什么是扩展

NEDNSProxyProviderProtocol

/*
* This header is generated by classdump-dyld 0.1
* on Wednesday, September 20, 2017 at 9:28:10 PM Eastern European Summer Time
* Operating System: Version 11.0 (Build 15A372)
* Image Source: /System/Library/Frameworks/NetworkExtension.framework/NetworkExtension
* classdump-dyld is free of use, Copyright 漏 2013 by Elias Limneos.
*/

#import <NetworkExtension/NetworkExtension-Structs.h>
#import <NetworkExtension/NEVPNProtocol.h>

@class NSDictionary, NSString;

@interface NEDNSProxyProviderProtocol : NEVPNProtocol {

    NSDictionary* _providerConfiguration;
    NSString* _providerBundleIdentifier;
    NSString* _pluginType;

}

@property (copy) NSString* pluginType;                          //@synthesize pluginType=_pluginType - In the implementation block
@property (copy) NSDictionary* providerConfiguration;           //@synthesize providerConfiguration=_providerConfiguration - In the implementation block
@property (copy) NSString* providerBundleIdentifier;            //@synthesize providerBundleIdentifier=_providerBundleIdentifier - In the implementation block
+(bool)supportsSecureCoding;
-(id)providerBundleIdentifier;
-(id)providerConfiguration;
-(id)init;
-(void).cxx_destruct;
-(id)initWithCoder:(id)arg1 ;
-(void)encodeWithCoder:(id)arg1 ;
-(id)copyWithZone:(NSZoneRef)arg1 ;
-(bool)checkValidityAndCollectErrors:(id)arg1 ;
-(id)descriptionWithIndent:(int)arg1 options:(unsigned long long)arg2 ;
-(void)setPluginType:(id)arg1 ;
-(id)initWithPluginType:(id)arg1 ;
-(id)pluginType;
-(void)setProviderBundleIdentifier:(id)arg1 ;
-(void)setProviderConfiguration:(id)arg1 ;
@end

参考：How to use NEDNSProxyProvider in iOS 11

如何在iOS 11中使用NEDNSProxyProvider

NEDNSSettings

相关的API

初始化NEDNSSetting对象


- (instancetype)initWithServers:(NSArray<NSString *> *)servers;

DNS服务器IP地址。

@property(readonly) NSArray<NSString *> *servers;

用于完全限定单标签主机名的域字符串列表

@property(copy) NSArray<NSString *> *searchDomains;

域名

@property(copy) NSString *domainName;

一个布尔值，指定matchDomains列表中的域是否不应附加到解析程序的搜索域列表中。

@property BOOL matchDomainsNoSearch;
上一篇 下一篇

猜你喜欢

热点阅读