https://github.com/gastonmorixe/appletv-tvos-vpn-secure-dns-profiles

🌍 🛜 Native AppleTV tvOS 17+ VPN Profiles IKEv2 IPSec PPP L2TP PPTP and 🔐 Secure DNS-over-TLS/QUIC and DNS-over-HTTPS
https://github.com/gastonmorixe/appletv-tvos-vpn-secure-dns-profiles

apple appletv dns-over-https dns-over-tls mdm mobileconfig nextdns protonvpn tvos tvos-vpn vpn

Last synced: about 1 month ago
JSON representation

🌍 🛜 Native AppleTV tvOS 17+ VPN Profiles IKEv2 IPSec PPP L2TP PPTP and 🔐 Secure DNS-over-TLS/QUIC and DNS-over-HTTPS

• Host: GitHub
• URL: https://github.com/gastonmorixe/appletv-tvos-vpn-secure-dns-profiles
• Owner: gastonmorixe
• License: mit
• Created: 2023-09-27T12:56:35.000Z (over 1 year ago)
• Default Branch: main
• Last Pushed: 2023-09-27T13:23:23.000Z (over 1 year ago)
• Last Synced: 2024-10-22T23:45:43.482Z (3 months ago)
• Topics: apple, appletv, dns-over-https, dns-over-tls, mdm, mobileconfig, nextdns, protonvpn, tvos, tvos-vpn, vpn
• Homepage:
• Size: 8.79 KB
• Stars: 8
• Watchers: 3
• Forks: 1
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# AppleTV tvOS VPN and Secure DNS Profiles

AppleTV tvOS 17+ VPN Profiles (mobileconfig) with support of IKEv2 IPSec PPP L2TP PPTP and Secure DNS-over-TLS/QUIC and DNS-over-HTTPS

## Releases

⚡️ Coming Soon ⚡️

## Goals

- VPN Profiles for protocols: [com.apple.vpn.managed](https://github.com/apple/device-management/blob/72c2a0a69f7dfad97f1a7d5733154e81de4e7448/mdm/profiles/com.apple.vpn.managed.yaml)

  - IKEv2 ✅ (tested, works)

  - IPSec

  - PPP

  - L2TP

  - PPTP

  - WireGuard

- Secure DNS Settings [com.apple.dnsSettings.managed.yaml](https://github.com/apple/device-management/blob/72c2a0a69f7dfad97f1a7d5733154e81de4e7448/mdm/profiles/com.apple.dnsSettings.managed.yaml)

  - DNS-over-TLS/QUIC 

  - DNS-over-HTTPS ✅ (tested, works)

- Secure DNS over VPN ❌ (tested, doesn't work, not supported?)

  > Apple's documentation says it is supported on tvOS 17+ but it doesn't install and in the [mdm profile yaml tvOS doesn't seem to be listed (only iOS and macOS)](https://github.com/apple/device-management/blob/72c2a0a69f7dfad97f1a7d5733154e81de4e7448/mdm/profiles/com.apple.vpn.managed.yaml#L1178-L1194) which [contradicts their docs](https://developer.apple.com/documentation/devicemanagement/vpn/dns)

## Documentation

### Apple Official Device Management spec

- https://github.com/apple/device-management/blob/release/mdm/profiles/com.apple.vpn.managed.yaml

### Apple Official VPN tvOS 17+ Documentation

- ✅ https://developer.apple.com/documentation/devicemanagement/vpn

- ✅ https://developer.apple.com/documentation/devicemanagement/vpn/ikev2

- ❌ https://developer.apple.com/documentation/devicemanagement/vpn/dns

  - *Do VPN DNS settings work in tvOS 17+? Couldn't make work, profile doesn't install if set*

### Other Official Reference 

- https://support.apple.com/guide/deployment/ikev2-settings-dep4ce9487d/web

### Profile Generation Tooling

- Apple Configurator 2

- [iMazing Profile Editor](https://imazing.com/profile-editor)

- ~https://github.com/timsutton/make-profile-pkg~

### Guides

- TODO: Add OS Repo tool 

- https://imazing.com/guides/how-to-create-or-edit-apple-configuration-profiles

- https://imazing.com/guides/apple-device-management-glossary#mdm

### Public Dicussions

- https://www.reddit.com/r/appletv/comments/14y5bk1/public_beta_and_vpn_works/

- https://www.reddit.com/r/appletv/comments/16sglky/why_is_it_taking_so_long_for_the_big_guys_to/

### Learning

- https://www.cloudflare.com/learning/dns/dns-over-tls/

## Licensing

MIT 2023 Gaston Morixe