52

I develop my iOS app using a local server running on my dev box. When testing on devices, I connect directly via an IP address, which is over HTTP and not HTTPS (so I don't have to deal with self-signed certs while in development, which the device wouldn't even like anyways).

I thought that this would be sufficient:

enter image description here

However, cannot get it to work without also adding NSAllowsArbitraryLoads = YES, AKA this:

enter image description here

Now, I will have to remember to remove this when rolling a production build but not during development...arg. Should the NSExceptionDomains work with IP addresses, and if not, is there anything else I can do without also enabling NSAllowsArbitraryLoads?

4 Answers 4

52

Hard-coded IP address wont work in iOS9. I also faced the same issue. Tried all permutations & combinations of available solutions. Finally, had to use a proper domain name.

So, NO.In iOS9 you just can't get away with hard-coded IP addresses.

8
26

is there anything else I can do without also enabling NSAllowsArbitraryLoads?

One workaround is to use xip.io, as explained by QJeffR in this Apple Developer Forums thread (which was shared by David L in his comment):

A DNS call to (for example) 10.0.1.8.xip.io will resolve to 10.0.1.8, allowing use of the domain instead of the IP address for the NSExceptionDomains key.

3
  • This works for those that need to (for various reasons) connect to an IP address instead of a domain name, or to connect to LAN IP addresses. This also works for LAN addresses, but the iOS must have an internet connection to be able to access the xip.io service. Then all you need is to allow "xip.io" and subdomains in the App Transport Security Settings.
    – wilsontgh
    Jan 6, 2016 at 9:52
  • Wouldn't this just route all your insecure traffic through an unknown xip.io server?
    – Efren
    Apr 26, 2017 at 5:55
  • DNS calls don't route traffic, they just "map" domain names with ip addresses.
    – Pochi
    Jan 9, 2018 at 4:53
5

As @PanxShaz said you can't put an hardcoded IP address but you can use an easy workaround:

  1. Open your /etc/hosts file using sudo and add a new local domain name for your ip address. Example:

    192.168.99.100 docker-host.localhost

  2. Then flush your DNS :

    dscacheutil -flushcache

  3. And finally use this new local domain in your app transport security exceptions.

3
  • 1
    This is not possible on iOS without jailbreaking.
    – Avi
    Aug 31, 2016 at 11:53
  • @Avi Yes, it is possible, simply because this is actually done on you mac. The purpose here is to offer a workaround when developing.
    – anasaitali
    Aug 31, 2016 at 14:23
  • Unless your iOS device is using your mac for DNS, it won't work. Maybe on the simulator.
    – Avi
    Aug 31, 2016 at 15:54
4

If you are targeting iOS 10+, just set the NSAllowsLocalNetworking flag.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.