Skip to content

Commit df45cdb

Browse files
authored
Merge pull request #698 from AdguardTeam/agm-2450-update-icloud-private-relay-md
[AGM-2450] Update AG for Mac's icloud-private-relay.md
2 parents c342f46 + da685f8 commit df45cdb

File tree

1 file changed

+7
-7
lines changed

1 file changed

+7
-7
lines changed

docs/adguard-for-mac/solving-problems/icloud-private-relay.md

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -26,17 +26,17 @@ On Big Sur, AdGuard developed "split-tunnel" rules to avoid creating the "defaul
2626

2727
On Monterey, iCloud Private Relay got introduced. Privacy features of the Mail app also use Private Relay servers.
2828

29-
As a consequence, AdGuard can't work together with iCloud Private Relay and the Mail app privacy features:
29+
As a consequence, AdGuard cant work together with iCloud Private Relay and the Mail app privacy features:
3030

3131
1. iCloud Private Relay is applied to connections at the library level — before they reach the socket level, where AdGuard operates.
32-
2. iCloud Private Relay uses QUIC, which AdGuard can't filter in filtered apps because HTTP/3 filtering is not yet available.
33-
3. Consequently, AdGuard blocks QUIC, including iCloud Private Relay traffic — otherwise, ad blocking is impossible.
34-
4. When you use iCloud Private Relay and switch AdGuard into the "split-tunnel" mode, you can't open websites in Safari.
35-
5. To work around this issue for Monterey, we apply the "default route" rule. When Private Relay sees that rule, it disables itself automatically.
32+
2. iCloud Private Relay is implemented with HTTP/3 CONNECT proxies.
33+
3. Since AdGuard does not filter CONNECT HTTP/3 requests yet, it attempts to downgrade HTTP/3 proxy connections to HTTP/1.1, which results in blocking iCloud Private Relay traffic.
34+
4. When you use iCloud Private Relay and switch AdGuard into the Split-Tunnel mode, you cant open websites in Safari.
35+
5. To work around this issue for Monterey, we apply the default route rule. When Private Relay sees that rule, it disables itself automatically.
3636
So, AdGuard works seamlessly on Monterey, but iCloud Private Relay gets disabled.
3737

38-
`network.extension.monterey.force.split.tunnel` restores the "Big Sur" behavior, but this option may break access to websites due to (3) and (4).
39-
We keep searching for a solution to this issue. One of the options is implementing HTTP/3 filtering.
38+
The `network.extension.monterey.force.split.tunnel` option restores the Big Sur behavior, but this option may break access to websites due to (3) and (4).
39+
We keep searching for a solution to this issue. One of the options is implementing HTTP/3 proxy filtering.
4040

4141
## Recommended solution
4242

0 commit comments

Comments
 (0)