NetworkDNSSettings
The declaration to configure encrypted DNS settings.
Declaration
object NetworkDNSSettingsProperties
| Name | Type | Description |
|---|---|---|
DNSSettings Required | NetworkDNSSettingsDNSSettingsObject | A dictionary that defines a configuration for an encrypted DNS server. |
OnDemandRules | [NetworkDNSSettingsOnDemandRulesElementObject] | An array of rules that define the DNS settings. If not set, the system always applies the DNS settings. These rules are identical to the |
ProhibitDisablement | boolean | If Allowed enrollments: supervised |
VisibleName Required | string | The name of the DNS settings that the system displays on the device. |
Discussion
Specify com.apple.configuration.network.dns-settings as the declaration type.
The following rules determine which networks the settings apply to:
For supervised enrollments, the settings apply to all networks.
For device enrollments, the settings are limited to only managed networks.
For local installs, the settings apply to all networks.
Configuration availability
Allowed in supervised enrollment | iOS, macOS, Shared iPad, visionOS |
Allowed in device enrollment | iOS, Shared iPad, visionOS |
Allowed in user enrollment | N/A |
Allowed in local enrollment | iOS, macOS, Shared iPad, visionOS |
Allowed in system scope | iOS, macOS, Shared iPad, visionOS |
Allowed in user scope | N/A |
Apply | Multiple configurations are applied separately |
Configuration example
This configuration sets up encrypted DNS using DNS-over-HTTPS.
{
"Type": "com.apple.configuration.network.dns-settings",
"Identifier": "EB13EE2B-5D63-4EBA-810F-5B81D07F5017",
"ServerToken": "E180CA9A-F089-4FA3-BBDF-94CC159C4AE8",
"Payload": {
"VisibleName": "DNS Settings",
"DNSSettings": {
"DNSProtocol": "HTTPS",
"ServerURL": "https://dns.example.com/dns-query",
"ServerAddresses": [
"12.12.12.12"
],
"AllowFailover": false,
"SupplementalMatchDomains": [
"example.com"
]
}
}
}