Friday, June 8, 2018

Apple claiming "Wake on WLAN" is used for APNs notifications - anyone dealt with this?

Some of our developers have been having trouble with Wi-Fi only (i.e. no SIM) Apple devices going to sleep and not receiving their APNs notifications.

Our devs are out at the WWDC conference and the Apple guys are informing them that they send a Wake on WLAN packet down with/preceding the push notification in order to wake the phone up, and that we must be "blocking it."

They are unable to provide any kind of technical documentation on this, or really very much in the way of clarity, so I have to assume they're sending a standard UDP "magic packet" with a layer 2 address in it. To configure this on our firewall edge would be nearly impossible; we'd have to accept and forward all WOL packets sourced from Apple's subnet (since they refuse to be more specific than 17.0.0.0/8 about their APNs ranges), and send them to the broadcast addresses of all of our wireless subnets. That seems like a nightmare and I honestly don't see many corporate networking groups supporting that configuration. Aside from the security implications, the network spam of having every single APNs notification flooded to every single wireless subnet is a terrible idea.

Has anyone else had experience with Apple's Wake on WLAN? Is this really what they're expecting? Does anyone else actually do this?

I'll be doing some network edge Wireshark collection once our devs get back.

TL;DR: Apple claims they send Wake on WLAN packets to wake up the CPUs of their mobile devices. Anyone have any experience with it?



No comments:

Post a Comment