Hacker News Reader

The short answer is no, not easily. A more elaborate solution would be to install a global proxy on the device and route the connection through a server you control, filtering the traffic you don't want to go through. You can use Apple Configurator to configure the global proxy.

View on HN

Thanks for the suggestion. That would work for whitelisting, but would block random web browsing. Or is there a way for the proxy to associate traffic flows with individual apps, e.g. permit all Safari traffic, block all other traffic that is not whitelisted?

Could a per-app VPN be used to blackhole app-specific network traffic at the VPN server? If so, would this need a third-party MDM solution, or could the native IPSEC client be used?

Reply on news.ycombinator.com