NetworkExtension iOS xcode16.3 b1

#NetworkExtension.framework

diff -ruN /Applications/Xcode_16.2.0.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/SDKs/iPhoneOS.sdk/System/Library/Frameworks/NetworkExtension.framework/Headers/NEFilterManager.h /Applications/Xcode_16.3.0-beta.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/SDKs/iPhoneOS.sdk/System/Library/Frameworks/NetworkExtension.framework/Headers/NEFilterManager.h
--- /Applications/Xcode_16.2.0.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/SDKs/iPhoneOS.sdk/System/Library/Frameworks/NetworkExtension.framework/Headers/NEFilterManager.h	2024-11-10 11:42:28
+++ /Applications/Xcode_16.3.0-beta.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/SDKs/iPhoneOS.sdk/System/Library/Frameworks/NetworkExtension.framework/Headers/NEFilterManager.h	2025-02-07 18:40:55
@@ -127,8 +127,8 @@
 
 /*!
  * @property disableEncryptedDNSSettings
- * @discussion Causes the content filter to disable any other installed encrypted DNS settings. This should only be used if
- * the content filter expects to intercept cleartext UDP DNS packets.  On macOS disables encrypted DNS for Privacy Proxies.
+ * @discussion Causes the content filter to disable any other installed encrypted DNS settings, including iCloud Private Relay system-wide DNS encryption. This should only be used if
+ * the content filter expects to intercept cleartext UDP DNS packets.
  */
 @property (assign) BOOL disableEncryptedDNSSettings API_AVAILABLE(macos(15.0)) API_UNAVAILABLE(ios, watchos, tvos);
 
diff -ruN /Applications/Xcode_16.2.0.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/SDKs/iPhoneOS.sdk/System/Library/Frameworks/NetworkExtension.framework/Headers/NERelayManager.h /Applications/Xcode_16.3.0-beta.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/SDKs/iPhoneOS.sdk/System/Library/Frameworks/NetworkExtension.framework/Headers/NERelayManager.h
--- /Applications/Xcode_16.2.0.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/SDKs/iPhoneOS.sdk/System/Library/Frameworks/NetworkExtension.framework/Headers/NERelayManager.h	2024-11-10 07:46:58
+++ /Applications/Xcode_16.3.0-beta.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/SDKs/iPhoneOS.sdk/System/Library/Frameworks/NetworkExtension.framework/Headers/NERelayManager.h	2025-02-07 23:09:57
@@ -143,15 +143,27 @@
 
 /*!
  * @property matchDomains
- * @discussion An array of strings containing domain names. If this property is non-nil, the relay will only be used to access hosts within the specified domains. If the property is nil, the relay will be used for all domains.
+ * @discussion An array of strings containing domain names. If this property is non-nil, the relay will be used to access hosts within the specified domains. If this and the match FQDNs property is nil, the relay will be used for all domains.
  */
 @property (copy, nullable) NSArray<NSString *> *matchDomains;
 
 /*!
+ * @property matchFQDNs
+ * @discussion An array of strings containing Fully Qualified Domain Names (FQDNs). If this property is non-nil, the relay will be used to access the specified hosts.  If this and the matchDomains property is nil, the relay will be used for all domains.
+ */
+@property (copy, nullable) NSArray<NSString *> *matchFQDNs;
+
+/*!
  * @property excludedDomains
  * @discussion An array of strings containing domain names. If the destination host name of a connection shares a suffix with one of these strings then the relay will not be used.
  */
 @property (copy, nullable) NSArray<NSString *> *excludedDomains;
+
+/*!
+ * @property excludedFQDNs
+ * @discussion An array of strings containing Fully Qualified Domain Names (FQDNs). If the destination host matches one of these strings then the relay will not be used.  An excluded FQDN takes priority over the matchDomain property.  This means the relay will not be used if the hostname matches an FQDN in this array even if the matchDomains contains a domain that would have been considered a match.
+ */
+@property (copy, nullable) NSArray<NSString *> *excludedFQDNs;
 
 /*!
  * @property onDemandRules