letsessionConfig=URLSessionConfiguration.default

// The tunnel might be asked to start before the network interfaces have woken up from sleep

sessionConfig.waitsForConnectivity=true

// URLSession's waiting for connectivity sometimes hangs even when

// the network is up so this is deliberately short (30s) to avoid a

// poor UX where it appears stuck.

sessionConfig.timeoutIntervalForResource=30

// Timeout after 5 minutes, or if there's no data for 60 seconds

sessionConfig.timeoutIntervalForRequest=60

sessionConfig.timeoutIntervalForResource=300

tryawaitdownload(src: dylibPath, dest: dest, urlSession:URLSession(configuration: sessionConfig))

throw.download(error)

start(completionHandler)

// called by `startTunnel` and on `wake`

// called by `startTunnel`

func start(_ completionHandler:@escaping(Error?)->Void){

guardlet proto= protocolConfigurationas?NETunnelProviderProtocol,

let baseAccessURL= proto.serverAddress

teardown(completionHandler)

// called by `stopTunnel` and `sleep`

// called by `stopTunnel`

func teardown(_ completionHandler:@escaping()->Void){

guardlet managerelse{

logger.error("teardown called with nil Manager")

// sleep and wake reference: https://developer.apple.com/forums/thread/95988

overridefunc sleep(completionHandler:@escaping()->Void){

logger.debug("sleep called")

teardown(completionHandler)

overridefunc wake(){

// It's possible the tunnel is still starting up, if it is, wake should

// be a no-op.

guard !reassertingelse{return}

guard manager==nilelse{

logger.error("wake called with non-nil Manager")

logger.debug("wake called")

reasserting=true

currentSettings=.init(tunnelRemoteAddress:"127.0.0.1")

start{ errorin

iflet error{

self.logger.error("error starting tunnel after wake:\(error.localizedDescription)")

self.cancelTunnelWithError(error)

self.reasserting=false

// Wrapper around `setTunnelNetworkSettings` that supports merging updates

func applyTunnelNetworkSettings(_ diff:Vpn_NetworkSettingsRequest)asyncthrows{

logger.debug("applying settings diff:\(diff.debugDescription, privacy:.public)")