Talk to Apple about that: https://developer.apple.com/documentation/networkextension/personal_vpn/vpn_on_demand_rules I'm hesitant to stray too far from the analogies that they set up, even if this is geared toward developers, because inevitably people start googling, and I'd rather them find what they're searching for.