This question already has an answer here:

I need to make sure that one of the apps I use can only use internet traffic that goes through VPN.

How, as a non-corporate user, can I achieve that? Can per-app VPN settings enabled with a custom profile help with that? Is it the best possible way?

My first thoughts are:

  • MDM profile-defined per-app VPN. If it is a way to go, what are the key pieces of the setup I need? (I want to be sure that profile-defined per-app VPN will help with my problem; also that a manually-created profile will work just as well as a "enterprise tool-generated" one).

  • Workflow app or a similar tool. Is there any which is able to initiate VPN connection and wait until connection is established?

  • "Connect on demand" always-on VPN: I tried it, but it allows some of the app's traffic to skip VPN when switching from wifi to mobile data or vice versa, for the periods when VPN is reconnecting. Such non-VPN traffic for the app is what I want to avoid completely.

Of course I'm fine to wait for establishing connection every time I switch to the app if any of the methods require that.

marked as duplicate by JBis, Ɱark Ƭ, Nimesh Neema, Jaime Santa Cruz, fsb Aug 27 '18 at 17:57

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

  • 1
    Welcome to Ask Different, you may want to read Apple's documentation on Per App VPN: help.apple.com/deployment/ios/#/apdfbf6f529b. The article states that in order to use Per App VPN, an app must be managed by MDM (Mobile Device Management) and use standard networking APIs, that is, the device must be managed in a corporate environment, which is not your case (you mention that you a non-corporate user). A solution would be to create a MDM profile yourself. – jaume Aug 26 '18 at 19:00
  • 1
    If you want to go to the trouble of creating an MDM profile yourself, this is a (rather long) guide to do it: medium.com/developerinsider/… – jaume Aug 26 '18 at 19:00
  • @jaume Thanks, I've seen the guide mentioned in one of the earlier questions at SE. The questions still remain: will manually-created MDM profile help me with what I need? – wass rubleff Aug 26 '18 at 19:02
  • I don't see why not, I'd say a manually-created MDM profile acts on the device in the same way an MDM profile created by an enterprise tool like MobileIron would. But I don't have first-hand experience, so I can't give you a definitive answer. Hopefully someone who has can chime in. I'd recommend that you edit your question to make it clear that you know that a MDM profile is necessary and you want to be sure that a manually-created profile will work just as well as a "enterprise tool-generated" one. – jaume Aug 26 '18 at 19:17
  • Thanks, tried to expand my question to better reflect what aspects are still unclear for me in the options I can see. – wass rubleff Aug 26 '18 at 22:39

Browse other questions tagged .