Discussions

Ask a Question
Back to All

Suggestions for missing iOS features supported under Apple's dnsSettings

When onboarding devices, there are some missing ondemand options that are supported by iOS.

  1. the generate profile option only allows whitelisting based on SSID and individual domains to bypass when there are other options that can be useful: URLStringProbe, DNSServerAddressMatch, InterfaceTypeMatch, DNSDomainMatch
    Reference: https://developer.apple.com/documentation/devicemanagement/dnssettings/ondemandruleselement
  2. the automated setup using the iOS app only supports excluding based on SSID and doesn't have the exclude domains or the options like above.
  3. allow the clientID in the DNS-over-HTTPs configuration to be autopopulated with values from the client's local variables (hostname, model number, serial number, etc). This can allow someone to deploy a ControlD device per enduser and have that be able to refence each unique client/device to the same profile automatically.
    for example, ControlD device "John Smith access" can have the following clientIDs "iphone-1192","ipad-1234","laptop-12441"