Network ExtensionでiOSデバイス上で動くパケットキャプチャを作る

by Kishikawa Katsumi

Slide 1

Slide 1 text

Kishikawa Katsumi Network ExtensionͰiOSσόΠε্Ͱಈ͘ ύέοτΩϟϓνϟΛ࡞Δ

Slide 2

Slide 2 text

Agenda • Network Extension͓ΑͼύέοτΩϟϓνϟͷ֓ཁ • VPNͷ࢓૊Έ • Network ExtensionΛ࢖ͬͯ؆қVPNΫϥΠΞϯτΛ࣮૷͢Δ • ύέοτͷߏ଄ͱղੳ • ύέοτΩϟϓνϟΛར༻࣮ͨ͠༻తͳπʔϧͷ࡞੒

Slide 3

Slide 3 text

Introduction • Network Extensionͱ͸ʁ • ύέοτΩϟϓνϟͱ͸ʁ

Slide 4

Slide 4 text

Network Extensionͱ͸

Slide 5

Slide 5 text

Network Extensionͱ͸ • macOS/iOSͷωοτϫʔΫؔ࿈ͷػೳΛ֦ுɾΧελϚΠζͰ͖ΔAPI • Wi-Fiઃఆͷมߋ • ΧϑΣͷWiFiʹࣗಈతʹ઀ଓ͢ΔɺͳͲ • γεςϜɺ·ͨ͸ΧελϜVPNϓϩτίϧΛ࢖༻ͨ͠VPNߏ੒ͷ࡞੒ͱ؅ཧ • ΦϯσόΠεͷίϯςϯπϑΟϧλͷ࣮૷ • γεςϜશମͷDNSߏ੒ͷ࡞੒ͱ؅ཧ

Slide 6

Slide 6 text

Slide 7

Slide 7 text

Network Extensionͱ͸ NetworkExtension.framework͕ఏڙ͢ΔAPIʢൈਮʣ • WiFiઃఆ • NEHotspotCon fi gurationManager • NEHotspotHelper • ΧελϜVPN • NEPacketTunnelProvider • ίϯςϯπϑΟϧλ • NEFilterDataProvider • NEFilterControlProvider

Slide 8

Slide 8 text

ύέοτΩϟϓνϟͱ͸

Slide 9

Slide 9 text

ύέοτΩϟϓνϟͱ͸ ωοτϫʔΫΛྲྀΕΔ௨৴σʔλʢύέοτʣΛσόοάͳͲͷͨΊ ʹऔಘʢΩϟϓνϟʣͯ͠Θ͔Γ΍͘͢දࣔͨ͠Γ͢Διϑτ΢ΣΞ

Slide 10

Slide 10 text

ύέοτΩϟϓνϟͱ͸ Wireshark

Slide 11

Slide 11 text

ύέοτΩϟϓνϟͱ͸ Charles Proxy

Slide 12

Slide 12 text

ύέοτΩϟϓνϟͱ͸ Charles Proxy

Slide 13

Slide 13 text

No content

Slide 14

Slide 14 text

Charles Proxy for iOSͷΑ͏ͳύέο τΩϟϓνϟΞϓϦΛ࡞Δʹ͸ʁ

Slide 15

Slide 15 text

Charles Proxy for iOSͷΑ͏ͳύέοτΩϟϓνϟΛ࡞Δʹ͸ʁ • Network ExtensionΛ࢖ͬͯVPNΫϥΠΞϯτΛ࣮૷͢Δ • ʢΦϓγϣϯʣσόΠε୯ମͰ׬݁ͤ͞ΔͨΊʹVPNαʔόʔ΋࣮૷͢Δ • औಘͨ͠௨৴ͷ಺༰ΛຊମΞϓϦʹసૹͯ͠UIʹදࣔ͢Δ खॱ

Slide 16

Slide 16 text

Slide 17

Slide 17 text

VPNͱ͸

Slide 18

Slide 18 text

VPNͱ͸ VPNͷ࢓૊Έ Ծ૝ΠϯλʔϑΣʔε VPNΫϥΠΞϯτ tun0 ҉߸Խ ϦϞʔτVPN ೝূ  ෮߸ɾ ҉߸Խ

Slide 19

Slide 19 text

VPNͱ͸ VPNͷ࢓૊Έ Ծ૝ΠϯλʔϑΣʔε VPNΫϥΠΞϯτ tun0 ҉߸Խ ϦϞʔτVPN ೝূ  ෮߸ɾ ҉߸Խ

Slide 20

Slide 20 text

VPNͱ͸ VPNͷ࢓૊Έ Ծ૝ΠϯλʔϑΣʔε VPNΫϥΠΞϯτ tun0 ҉߸Խ ϦϞʔτVPN ೝূ  ෮߸ɾ ҉߸Խ

Slide 21

Slide 21 text

VPN্ΛྲྀΕΔσʔλ σʔλ IP HTTP TCP

Slide 22

Slide 22 text

VPN্ΛྲྀΕΔσʔλ σʔλ IP HTTP TCP VPN

Slide 23

Slide 23 text

VPN্ΛྲྀΕΔσʔλ σʔλ IP HTTP TCP VPN IP TCP

Slide 24

Slide 24 text

Network ExtensionͰ؆қVPNΫ ϥΠΞϯτͱαʔόʔΛ࣮૷͢Δ

Slide 25

Slide 25 text

Network ExtensionΛ࢖ͬͯVPNΛ࣮૷͢Δ Packet Tunnel Provider • Personal VPN • Packet Tunnel Provider • App Proxy Provider

Slide 26

Slide 26 text

App Proxy Provider Supervised devices only

Slide 27

Slide 27 text

No content

Slide 28

Slide 28 text

Content Filter Provider

Slide 29

Slide 29 text

NEFilterDataProvider • NEFilterDataProvider • TCP/UDPʢϨΠϠʔ̐ʣͷ৘ใ͕औಘͰ͖ΔͷͰVPNΛ࡞ΔΑΓ؆୯ • ❌ Content FilterΛ࢖ͬͯऔಘͨ͠௨৴ͷ಺༰͸ϑΝΠϧʹॻ͍ͨΓ֎෦ʹૹ ৴͢Δ͜ͱ͕Ͱ͖ͳ͍ ❌ Content FilterΛ࢖ͬͯύέοτΩϟϓνϟΛ࣮૷͢Δ

Slide 30

Slide 30 text

Network ExtensionΛ࢖ͬͯVPNΛ࣮૷͢Δ Packet Tunnel Provider • Personal VPN • Packet Tunnel Provider • App Proxy Provider

Slide 31

Slide 31 text

No content

Slide 32

Slide 32 text

No content

Slide 33

Slide 33 text

No content

Slide 34

Slide 34 text

No content

Slide 35

Slide 35 text

EntitlementΛ௥Ճ͢Δ

Slide 36

Slide 36 text

No content

Slide 37

Slide 37 text

No content

Slide 38