Sidebar Sidebar
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

Resolved Is there a VPN that doesn't break iCloud Private Relay?

R

RoboCop001

macrumors 68000
Original poster
Oct 4, 2005
1,574
454
Toronto, Canada
Hi everyone.

I've been occasionally using NordVPN and every time I do, I get an alert that says "software installed on this Mac is incompatible with iCloud Private Relay." The only solution to get iCPR to work again is a reboot.

I can't remember which macOS first had iCPR, but I'm pretty sure this wasn't happening with the initial rollout of iCPR, but I may not be remembering accurately. But I seem to remember using NordVPN just fine without this problem at first.

With that said, I don't have this problem when I use my work's GlobalProtect VPN software on the same machine (this is my personal machine).

I'm willing to replace NordVPN with another one (especially if it's a generally better VPN).

Are there any consumer-level VPNs that don't do this with iCPR?

Update
I went with Mullvad + Tailscale as suggested by ondioline (thanks!).
tailscale.com

Surf the Web Privately with Mullvad's Global Network + Tailscale

Use any of Mullvad's available servers as a Tailscale exit node to maintain browser privacy and security.
tailscale.com tailscale.com
 
Last edited:
  • Like
Reactions: gilby101
RoboCop001 said:
software installed on this Mac is incompatible with iCloud Private Relay
Click to expand...
My view: iCPR is a sort of VPN, and I don't expect two VPNs to play nicely together. I feel a consumer VPN product (I use PIA) gives me better control so I keep iCPR off.

Nevertheless, I would be interested to know if any VPN products do work well with Sequoia's iCPR.
 
  • Like
Reactions: Ericdjensen
gilby101 said:
My view: iCPR is a sort of VPN, and I don't expect two VPNs to play nicely together. I feel a consumer VPN product (I use PIA) gives me better control so I keep iCPR off.

Nevertheless, I would be interested to know if any VPN products do work well with Sequoia's iCPR.
Click to expand...

That's fair, and I have the same kind of thought about it too. However, I wouldn't mind if I had to first turn off iCPR and then turn on the other VPN. But the thing is, even when I turn it off and then turn on NordVPN, it still breaks it. So, still super annoying and shouldn't be happening. It should be smart though, and either work alongside it or iCPR should temporarily turn off and then back on again once I disconnect from the VPN.
 
BigBlur said:
I'm curious what the use case for this is. Isn't Private Relay essentially a VPN? What's the purpose of using Private Relay if you're already using a VPN?
Click to expand...

It seems that iCPR doesn't cover apps? Just Safari? That's what it feels like to me anyway. But sometimes I want to also to the location change, which of course iCPR doesn't do.
 
Also you can add your own exit nodes to your Tailscale network in addition to Mullvad. So for example if you wanted to go through your home LAN from your laptop/phone etc (I have my endpoint on my Synology)

Screenshot 2024-10-24 at 11.48.14 AM.png
 
RoboCop001 said:
Interesting. Can you elaborate a bit with an example use? And is this VPN also available on iOS?
Click to expand...
Yes it’s on iOS.

Basically when you are using a public/untrustworthy WiFi you can route your traffic via your home network through the VPN. This has the added benefit of not being blocked for various things like 99% of VPN provider endpoints.
 
ondioline said:
Yes it’s on iOS.

Basically when you are using a public/untrustworthy WiFi you can route your traffic via your home network through the VPN. This has the added benefit of not being blocked for various things like 99% of VPN provider endpoints.
Click to expand...

Interesting, although I'm not sure I fully understand. It sounds like my traffic would go from the public Wifi (or cellular data, too?), back to my home network, and then back out? As if I'm browsing from home? Am I understanding correctly?
 
RoboCop001 said:
It sounds like my traffic would go from the public Wifi (or cellular data, too?), back to my home network, and then back out? As if I'm browsing from home? Am I understanding correctly?
Click to expand...
Yes (both public wifi and cellular data). It does, of course, require an "always on" device at home - e.g. Mac, NAS, Pi. @ondioline is using his NAS, I would use my Pi.

There are other ways of doing this. I run a WireGuard server on my Pi. With a WireGuard client on my mobile devices (iPhone, MacBookPro) I can connect to any device on my home network and can connect out again to the Internet.

But, I don't think these "build your own" VPN solutions avoid the issues with iCPR - and that was your question!
 
gilby101 said:
Yes (both public wifi and cellular data). It does, of course, require an "always on" device at home - e.g. Mac, NAS, Pi. @ondioline is using his NAS, I would use my Pi.

There are other ways of doing this. I run a WireGuard server on my Pi. With a WireGuard client on my mobile devices (iPhone, MacBookPro) I can connect to any device on my home network and can connect out again to the Internet.

But, I don't think these "build your own" VPN solutions avoid the issues with iCPR - and that was your question!
Click to expand...

I see! It's good to know about being able to do this. Although I'm not sure if I'll ever use it, since most of my activity is at home. Plus the issues with iCPR.

But if Tailscale under normal operation doesn't break it, that's good enough for my purposes.
 
You must log in or register to reply here.
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.
Top Bottom
Back