xpc.connect()

xpc.getPeerState()

NotificationCenter.default.addObserver(

selector: #selector(vpnDidUpdate(_:)),

xpc.connect()

xpc.ping()

logger.debug("network extension enabled")

// The number of NETunnelProviderSession states makes the excessive branching

// necessary.

// swiftlint:disable:next cyclomatic_complexity

@objcprivatefunc vpnDidUpdate(_ notification:Notification){

guardlet connection= notification.objectas?NETunnelProviderSessionelse{

switch connection.status{

case.disconnected:

switch(tunnelState, connection.status){

// Any -> Disconnected: Update UI w/ error if present

case(_,.disconnected):

connection.fetchLastDisconnectError{ errin

self.tunnelState=iflet err{

.failed(.internalError(err.localizedDescription))

.disabled

case.connecting:

// Connecting -> Connecting: no-op

case(.connecting,.connecting):

// Connected -> Connected: no-op

case(.connected,.connected):

// Non-connecting -> Connecting: Establish XPC

case(_,.connecting):

xpc.connect()

xpc.ping()

tunnelState=.connecting

case.connected:

// Non-connected -> Connected: Retrieve Peers

case(_,.connected):

xpc.connect()

xpc.getPeerState()

tunnelState=.connected

case.reasserting:

// Any -> Reasserting

case(_,.reasserting):

tunnelState=.connecting

case.disconnecting:

// Any -> Disconnecting

case(_,.disconnecting):

tunnelState=.disconnecting

case.invalid:

// Any -> Invalid

case(_,.invalid):

tunnelState=.failed(.networkExtensionError(.unconfigured))

tunnelState=.disabled