Discussions
Suggestions for missing iOS features supported under Apple's dnsSettings
6 months ago by SEB
When onboarding devices, there are some missing ondemand options that are supported by iOS.
- the generate profile option only allows whitelisting based on SSID and individual domains to bypass when there are other options that can be useful: URLStringProbe, DNSServerAddressMatch, InterfaceTypeMatch, DNSDomainMatch
Reference: https://developer.apple.com/documentation/devicemanagement/dnssettings/ondemandruleselement - the automated setup using the iOS app only supports excluding based on SSID and doesn't have the exclude domains or the options like above.
- allow the clientID in the DNS-over-HTTPs configuration to be autopopulated with values from the client's local variables (hostname, model number, serial number, etc). This can allow someone to deploy a ControlD device per enduser and have that be able to refence each unique client/device to the same profile automatically.
for example, ControlD device "John Smith access" can have the following clientIDs "iphone-1192","ipad-1234","laptop-12441"