Resolved Is there a VPN that doesn't break iCloud Private Relay?

[RoboCop001]

Hi everyone.

I've been occasionally using NordVPN and every time I do, I get an alert that says "software installed on this Mac is incompatible with iCloud Private Relay." The only solution to get iCPR to work again is a reboot.

I can't remember which macOS first had iCPR, but I'm pretty sure this wasn't happening with the initial rollout of iCPR, but I may not be remembering accurately. But I seem to remember using NordVPN just fine without this problem at first.

With that said, I don't have this problem when I use my work's GlobalProtect VPN software on the same machine (this is my personal machine).

I'm willing to replace NordVPN with another one (especially if it's a generally better VPN).

Are there any consumer-level VPNs that don't do this with iCPR?

Update
I went with Mullvad + Tailscale as suggested by ondioline (thanks!).

Surf the Web Privately with Mullvad's Global Network + Tailscale

Understand how to securely and privately browse the web with Tailscale and Mullvad. Tailscale has partnered with Mullvad to make its global network of VPN servers available for users.

tailscale.com

 

[gilby101]

software installed on this Mac is incompatible with iCloud Private Relay

My view: iCPR is a sort of VPN, and I don't expect two VPNs to play nicely together. I feel a consumer VPN product (I use PIA) gives me better control so I keep iCPR off.

Nevertheless, I would be interested to know if any VPN products do work well with Sequoia's iCPR.

 

[ondioline]

Tailscale with Mullvad doesn't break it, I use it frequently. Mullvad is a better choice than NordVPN anyway ;P

Surf the Web Privately with Mullvad's Global Network + Tailscale

Understand how to securely and privately browse the web with Tailscale and Mullvad. Tailscale has partnered with Mullvad to make its global network of VPN servers available for users.

tailscale.com

 

[RoboCop001]

My view: iCPR is a sort of VPN, and I don't expect two VPNs to play nicely together. I feel a consumer VPN product (I use PIA) gives me better control so I keep iCPR off.

Nevertheless, I would be interested to know if any VPN products do work well with Sequoia's iCPR.

That's fair, and I have the same kind of thought about it too. However, I wouldn't mind if I had to first turn off iCPR and then turn on the other VPN. But the thing is, even when I turn it off and then turn on NordVPN, it still breaks it. So, still super annoying and shouldn't be happening. It should be smart though, and either work alongside it or iCPR should temporarily turn off and then back on again once I disconnect from the VPN.

 

[RoboCop001]

Tailscale with Mullvad doesn't break it, I use it frequently. Mullvad is a better choice than NordVPN anyway ;P

Surf the Web Privately with Mullvad's Global Network + Tailscale

Understand how to securely and privately browse the web with Tailscale and Mullvad. Tailscale has partnered with Mullvad to make its global network of VPN servers available for users.

tailscale.com

Thanks! I'll take a look at that. So am I looking for Mullvad? Is Tailscale the VPN portion or something?

 

[BigBlur]

I'm curious what the use case for this is. Isn't Private Relay essentially a VPN? What's the purpose of using Private Relay if you're already using a VPN?

 

[RoboCop001]

I'm curious what the use case for this is. Isn't Private Relay essentially a VPN? What's the purpose of using Private Relay if you're already using a VPN?

It seems that iCPR doesn't cover apps? Just Safari? That's what it feels like to me anyway. But sometimes I want to also to the location change, which of course iCPR doesn't do.

 

[ondioline]

Thanks! I'll take a look at that. So am I looking for Mullvad? Is Tailscale the VPN portion or something?

Tailscale is the client. You sign up for Mullvad through Tailscale (once you have an account)

 

[ondioline]

Also you can add your own exit nodes to your Tailscale network in addition to Mullvad. So for example if you wanted to go through your home LAN from your laptop/phone etc (I have my endpoint on my Synology)

 

[RoboCop001]

Also you can add your own exit nodes to your Tailscale network in addition to Mullvad. So for example if you wanted to go through your home LAN from your laptop/phone etc (I have my endpoint on my Synology)

View attachment 2441287

Interesting. Can you elaborate a bit with an example use? And is this VPN also available on iOS?

 

[ondioline]

Interesting. Can you elaborate a bit with an example use? And is this VPN also available on iOS?

Yes it’s on iOS.

Basically when you are using a public/untrustworthy WiFi you can route your traffic via your home network through the VPN. This has the added benefit of not being blocked for various things like 99% of VPN provider endpoints.

 

[RoboCop001]

Yes it’s on iOS.

Basically when you are using a public/untrustworthy WiFi you can route your traffic via your home network through the VPN. This has the added benefit of not being blocked for various things like 99% of VPN provider endpoints.

Interesting, although I'm not sure I fully understand. It sounds like my traffic would go from the public Wifi (or cellular data, too?), back to my home network, and then back out? As if I'm browsing from home? Am I understanding correctly?

 

[gilby101]

It sounds like my traffic would go from the public Wifi (or cellular data, too?), back to my home network, and then back out? As if I'm browsing from home? Am I understanding correctly?

Yes (both public wifi and cellular data). It does, of course, require an "always on" device at home - e.g. Mac, NAS, Pi. @ondioline is using his NAS, I would use my Pi.

There are other ways of doing this. I run a WireGuard server on my Pi. With a WireGuard client on my mobile devices (iPhone, MacBookPro) I can connect to any device on my home network and can connect out again to the Internet.

But, I don't think these "build your own" VPN solutions avoid the issues with iCPR - and that was your question!

 

[RoboCop001]

Yes (both public wifi and cellular data). It does, of course, require an "always on" device at home - e.g. Mac, NAS, Pi. @ondioline is using his NAS, I would use my Pi.

There are other ways of doing this. I run a WireGuard server on my Pi. With a WireGuard client on my mobile devices (iPhone, MacBookPro) I can connect to any device on my home network and can connect out again to the Internet.

But, I don't think these "build your own" VPN solutions avoid the issues with iCPR - and that was your question!

I see! It's good to know about being able to do this. Although I'm not sure if I'll ever use it, since most of my activity is at home. Plus the issues with iCPR.

But if Tailscale under normal operation doesn't break it, that's good enough for my purposes.

 

[RoboCop001]

Tailscale with Mullvad doesn't break it, I use it frequently. Mullvad is a better choice than NordVPN anyway ;P

Surf the Web Privately with Mullvad's Global Network + Tailscale

Understand how to securely and privately browse the web with Tailscale and Mullvad. Tailscale has partnered with Mullvad to make its global network of VPN servers available for users.

tailscale.com

I ended up going with this setup and it's working perfectly. Thanks!