diff --git a/profiles/adguard-family-https.mobileconfig b/profiles/adguard-family-https.mobileconfig
index e1df849..27e3d2b 100644
--- a/profiles/adguard-family-https.mobileconfig
+++ b/profiles/adguard-family-https.mobileconfig
@@ -19,6 +19,21 @@
ServerURL
https://dns-family.adguard.com/dns-query
+ OnDemandRules
+
+
+ Action
+ Connect
+ InterfaceTypeMatch
+ Cellular
+
+
+ Action
+ Connect
+ URLStringProbe
+ http://captive.apple.com/hotspot-detect.html
+
+
PayloadDescription
Configures device to use AdGuard Family Protection Encrypted DNS over HTTPS
PayloadDisplayName
diff --git a/profiles/adguard-https.mobileconfig b/profiles/adguard-https.mobileconfig
index 8750e16..21224a5 100644
--- a/profiles/adguard-https.mobileconfig
+++ b/profiles/adguard-https.mobileconfig
@@ -19,6 +19,21 @@
ServerURL
https://dns.adguard.com/dns-query
+ OnDemandRules
+
+
+ Action
+ Connect
+ InterfaceTypeMatch
+ Cellular
+
+
+ Action
+ Connect
+ URLStringProbe
+ http://captive.apple.com/hotspot-detect.html
+
+
PayloadDescription
Configures device to use Adguard Default Encrypted DNS over HTTPS
PayloadDisplayName
diff --git a/profiles/adguard-nofilter-https.mobileconfig b/profiles/adguard-nofilter-https.mobileconfig
index 686e67b..3566f0a 100644
--- a/profiles/adguard-nofilter-https.mobileconfig
+++ b/profiles/adguard-nofilter-https.mobileconfig
@@ -19,6 +19,21 @@
ServerURL
https://dns-unfiltered.adguard.com/dns-query
+ OnDemandRules
+
+
+ Action
+ Connect
+ InterfaceTypeMatch
+ Cellular
+
+
+ Action
+ Connect
+ URLStringProbe
+ http://captive.apple.com/hotspot-detect.html
+
+
PayloadDescription
Configures device to use Adguard No Filter Encrypted DNS over TLS
PayloadDisplayName
diff --git a/profiles/adguard-nofilter-tls.mobileconfig b/profiles/adguard-nofilter-tls.mobileconfig
index 0bfb7e6..6bc13aa 100644
--- a/profiles/adguard-nofilter-tls.mobileconfig
+++ b/profiles/adguard-nofilter-tls.mobileconfig
@@ -19,6 +19,21 @@
ServerName
dns-unfiltered.adguard.com
+ OnDemandRules
+
+
+ Action
+ Connect
+ InterfaceTypeMatch
+ Cellular
+
+
+ Action
+ Connect
+ URLStringProbe
+ http://captive.apple.com/hotspot-detect.html
+
+
PayloadDescription
Configures device to use Adguard No Filter Encrypted DNS over TLS
PayloadDisplayName
diff --git a/profiles/alekberg-https.mobileconfig b/profiles/alekberg-https.mobileconfig
index 317a583..d8bd2e7 100644
--- a/profiles/alekberg-https.mobileconfig
+++ b/profiles/alekberg-https.mobileconfig
@@ -38,6 +38,21 @@
ServerURL
https://dnsnl.alekberg.net/dns-query
+ OnDemandRules
+
+
+ Action
+ Connect
+ InterfaceTypeMatch
+ Cellular
+
+
+ Action
+ Connect
+ URLStringProbe
+ http://captive.apple.com/hotspot-detect.html
+
+
PayloadType
com.apple.dnsSettings.managed
PayloadIdentifier
diff --git a/profiles/alibaba-https.mobileconfig b/profiles/alibaba-https.mobileconfig
index 7881614..0b65f9b 100644
--- a/profiles/alibaba-https.mobileconfig
+++ b/profiles/alibaba-https.mobileconfig
@@ -19,6 +19,21 @@
ServerURL
https://dns.alidns.com/dns-query
+ OnDemandRules
+
+
+ Action
+ Connect
+ InterfaceTypeMatch
+ Cellular
+
+
+ Action
+ Connect
+ URLStringProbe
+ http://captive.apple.com/hotspot-detect.html
+
+
PayloadDescription
Configures device to use AliDNS Encrypted DNS over TLS
PayloadDisplayName
diff --git a/profiles/blahdns-cdn-adblock-doh1.mobileconfig b/profiles/blahdns-cdn-adblock-doh1.mobileconfig
index b541373..5ed1ca8 100644
--- a/profiles/blahdns-cdn-adblock-doh1.mobileconfig
+++ b/profiles/blahdns-cdn-adblock-doh1.mobileconfig
@@ -34,6 +34,21 @@ https://blahdns.com
ServerURL
https://doh1.blahdns.com/dns-query
+ OnDemandRules
+
+
+ Action
+ Connect
+ InterfaceTypeMatch
+ Cellular
+
+
+ Action
+ Connect
+ URLStringProbe
+ http://captive.apple.com/hotspot-detect.html
+
+
PayloadType
com.apple.dnsSettings.managed
PayloadIdentifier
diff --git a/profiles/blahdns-cdn-unfiltered-doh1.mobileconfig b/profiles/blahdns-cdn-unfiltered-doh1.mobileconfig
index 874cf2d..027caf1 100644
--- a/profiles/blahdns-cdn-unfiltered-doh1.mobileconfig
+++ b/profiles/blahdns-cdn-unfiltered-doh1.mobileconfig
@@ -34,6 +34,21 @@ https://blahdns.com
ServerURL
https://doh1.blahdns.com/uncensor
+ OnDemandRules
+
+
+ Action
+ Connect
+ InterfaceTypeMatch
+ Cellular
+
+
+ Action
+ Connect
+ URLStringProbe
+ http://captive.apple.com/hotspot-detect.html
+
+
PayloadType
com.apple.dnsSettings.managed
PayloadIdentifier
diff --git a/profiles/blahdns-finland-doh.mobileconfig b/profiles/blahdns-finland-doh.mobileconfig
index a05bfa9..4e7cece 100644
--- a/profiles/blahdns-finland-doh.mobileconfig
+++ b/profiles/blahdns-finland-doh.mobileconfig
@@ -39,6 +39,21 @@ https://blahdns.com
ServerURL
https://doh-fi.blahdns.com/dns-query
+ OnDemandRules
+
+
+ Action
+ Connect
+ InterfaceTypeMatch
+ Cellular
+
+
+ Action
+ Connect
+ URLStringProbe
+ http://captive.apple.com/hotspot-detect.html
+
+
PayloadType
com.apple.dnsSettings.managed
PayloadIdentifier
diff --git a/profiles/blahdns-germany-doh.mobileconfig b/profiles/blahdns-germany-doh.mobileconfig
index d63ed00..55a8c6b 100644
--- a/profiles/blahdns-germany-doh.mobileconfig
+++ b/profiles/blahdns-germany-doh.mobileconfig
@@ -39,6 +39,21 @@ https://blahdns.com
ServerURL
https://doh-de.blahdns.com/dns-query
+ OnDemandRules
+
+
+ Action
+ Connect
+ InterfaceTypeMatch
+ Cellular
+
+
+ Action
+ Connect
+ URLStringProbe
+ http://captive.apple.com/hotspot-detect.html
+
+
PayloadType
com.apple.dnsSettings.managed
PayloadIdentifier
diff --git a/profiles/blahdns-japan-doh.mobileconfig b/profiles/blahdns-japan-doh.mobileconfig
index 1a7e57b..c948e4e 100644
--- a/profiles/blahdns-japan-doh.mobileconfig
+++ b/profiles/blahdns-japan-doh.mobileconfig
@@ -39,6 +39,21 @@ https://blahdns.com
ServerURL
https://doh-jp.blahdns.com/dns-query
+ OnDemandRules
+
+
+ Action
+ Connect
+ InterfaceTypeMatch
+ Cellular
+
+
+ Action
+ Connect
+ URLStringProbe
+ http://captive.apple.com/hotspot-detect.html
+
+
PayloadType
com.apple.dnsSettings.managed
PayloadIdentifier
diff --git a/profiles/blahdns-singapore-doh.mobileconfig b/profiles/blahdns-singapore-doh.mobileconfig
index 93f3371..6b5fc52 100644
--- a/profiles/blahdns-singapore-doh.mobileconfig
+++ b/profiles/blahdns-singapore-doh.mobileconfig
@@ -39,6 +39,21 @@ https://blahdns.com
ServerURL
https://doh-sg.blahdns.com/dns-query
+ OnDemandRules
+
+
+ Action
+ Connect
+ InterfaceTypeMatch
+ Cellular
+
+
+ Action
+ Connect
+ URLStringProbe
+ http://captive.apple.com/hotspot-detect.html
+
+
PayloadType
com.apple.dnsSettings.managed
PayloadIdentifier
diff --git a/profiles/blahdns-switzerland-dot.mobileconfig b/profiles/blahdns-switzerland-dot.mobileconfig
index da76d42..8376873 100644
--- a/profiles/blahdns-switzerland-dot.mobileconfig
+++ b/profiles/blahdns-switzerland-dot.mobileconfig
@@ -39,6 +39,21 @@ https://blahdns.com
ServerName
dot-ch.blahdns.com
+ OnDemandRules
+
+
+ Action
+ Connect
+ InterfaceTypeMatch
+ Cellular
+
+
+ Action
+ Connect
+ URLStringProbe
+ http://captive.apple.com/hotspot-detect.html
+
+
PayloadType
com.apple.dnsSettings.managed
PayloadIdentifier
diff --git a/profiles/canadianshield-family-https.mobileconfig b/profiles/canadianshield-family-https.mobileconfig
index c4660cc..40e6bf4 100644
--- a/profiles/canadianshield-family-https.mobileconfig
+++ b/profiles/canadianshield-family-https.mobileconfig
@@ -19,6 +19,21 @@
ServerURL
https://family.canadianshield.cira.ca/dns-query
+ OnDemandRules
+
+
+ Action
+ Connect
+ InterfaceTypeMatch
+ Cellular
+
+
+ Action
+ Connect
+ URLStringProbe
+ http://captive.apple.com/hotspot-detect.html
+
+
PayloadDescription
Configures device to use Canadian Shield Encrypted DNS over HTTPS
PayloadDisplayName
diff --git a/profiles/canadianshield-family-tls.mobileconfig b/profiles/canadianshield-family-tls.mobileconfig
index 225d4ad..b901204 100644
--- a/profiles/canadianshield-family-tls.mobileconfig
+++ b/profiles/canadianshield-family-tls.mobileconfig
@@ -19,6 +19,21 @@
ServerName
family.canadianshield.cira.ca
+ OnDemandRules
+
+
+ Action
+ Connect
+ InterfaceTypeMatch
+ Cellular
+
+
+ Action
+ Connect
+ URLStringProbe
+ http://captive.apple.com/hotspot-detect.html
+
+
PayloadDescription
Configures device to use Canadian Shield Encrypted DNS over TLS
PayloadDisplayName
diff --git a/profiles/canadianshield-private-https.mobileconfig b/profiles/canadianshield-private-https.mobileconfig
index 1efa22c..4402004 100644
--- a/profiles/canadianshield-private-https.mobileconfig
+++ b/profiles/canadianshield-private-https.mobileconfig
@@ -19,6 +19,21 @@
ServerURL
https://private.canadianshield.cira.ca/dns-query
+ OnDemandRules
+
+
+ Action
+ Connect
+ InterfaceTypeMatch
+ Cellular
+
+
+ Action
+ Connect
+ URLStringProbe
+ http://captive.apple.com/hotspot-detect.html
+
+
PayloadDescription
Configures device to use Canadian Shield Encrypted DNS over HTTPS
PayloadDisplayName
diff --git a/profiles/canadianshield-private-tls.mobileconfig b/profiles/canadianshield-private-tls.mobileconfig
index 5824efc..c102a49 100644
--- a/profiles/canadianshield-private-tls.mobileconfig
+++ b/profiles/canadianshield-private-tls.mobileconfig
@@ -19,6 +19,21 @@
ServerName
private.canadianshield.cira.ca
+ OnDemandRules
+
+
+ Action
+ Connect
+ InterfaceTypeMatch
+ Cellular
+
+
+ Action
+ Connect
+ URLStringProbe
+ http://captive.apple.com/hotspot-detect.html
+
+
PayloadDescription
Configures device to use Canadian Shield Encrypted DNS over TLS
PayloadDisplayName
diff --git a/profiles/canadianshield-protected-https.mobileconfig b/profiles/canadianshield-protected-https.mobileconfig
index b588857..39a92d8 100644
--- a/profiles/canadianshield-protected-https.mobileconfig
+++ b/profiles/canadianshield-protected-https.mobileconfig
@@ -19,6 +19,21 @@
ServerURL
https://protected.canadianshield.cira.ca/dns-query
+ OnDemandRules
+
+
+ Action
+ Connect
+ InterfaceTypeMatch
+ Cellular
+
+
+ Action
+ Connect
+ URLStringProbe
+ http://captive.apple.com/hotspot-detect.html
+
+
PayloadDescription
Configures device to use Canadian Shield Encrypted DNS over HTTPS
PayloadDisplayName
diff --git a/profiles/canadianshield-protected-tls.mobileconfig b/profiles/canadianshield-protected-tls.mobileconfig
index 74ce303..114ee7a 100644
--- a/profiles/canadianshield-protected-tls.mobileconfig
+++ b/profiles/canadianshield-protected-tls.mobileconfig
@@ -19,6 +19,21 @@
ServerName
protected.canadianshield.cira.ca
+ OnDemandRules
+
+
+ Action
+ Connect
+ InterfaceTypeMatch
+ Cellular
+
+
+ Action
+ Connect
+ URLStringProbe
+ http://captive.apple.com/hotspot-detect.html
+
+
PayloadDescription
Configures device to use Canadian Shield Encrypted DNS over TLS
PayloadDisplayName
diff --git a/profiles/cloudflare-family-https.mobileconfig b/profiles/cloudflare-family-https.mobileconfig
index 961a669..6be512b 100644
--- a/profiles/cloudflare-family-https.mobileconfig
+++ b/profiles/cloudflare-family-https.mobileconfig
@@ -19,6 +19,21 @@
ServerURL
https://family.cloudflare-dns.com/dns-query
+ OnDemandRules
+
+
+ Action
+ Connect
+ InterfaceTypeMatch
+ Cellular
+
+
+ Action
+ Connect
+ URLStringProbe
+ http://captive.apple.com/hotspot-detect.html
+
+
PayloadDescription
Configures device to use Cloudflare Family Encrypted DNS over HTTPS
PayloadDisplayName
diff --git a/profiles/cloudflare-https.mobileconfig b/profiles/cloudflare-https.mobileconfig
index 84443e9..6761dd8 100644
--- a/profiles/cloudflare-https.mobileconfig
+++ b/profiles/cloudflare-https.mobileconfig
@@ -19,6 +19,21 @@
ServerURL
https://cloudflare-dns.com/dns-query
+ OnDemandRules
+
+
+ Action
+ Connect
+ InterfaceTypeMatch
+ Cellular
+
+
+ Action
+ Connect
+ URLStringProbe
+ http://captive.apple.com/hotspot-detect.html
+
+
PayloadDescription
Configures device to use Cloudflare Encrypted DNS over HTTPS
PayloadDisplayName
diff --git a/profiles/cloudflare-malware-https.mobileconfig b/profiles/cloudflare-malware-https.mobileconfig
index 0dd1d85..8e04363 100644
--- a/profiles/cloudflare-malware-https.mobileconfig
+++ b/profiles/cloudflare-malware-https.mobileconfig
@@ -19,6 +19,21 @@
ServerURL
https://security.cloudflare-dns.com/dns-query
+ OnDemandRules
+
+
+ Action
+ Connect
+ InterfaceTypeMatch
+ Cellular
+
+
+ Action
+ Connect
+ URLStringProbe
+ http://captive.apple.com/hotspot-detect.html
+
+
PayloadDescription
Configures device to use Cloudflare no Malware Encrypted DNS over HTTPS
PayloadDisplayName
diff --git a/profiles/cloudflare-tls.mobileconfig b/profiles/cloudflare-tls.mobileconfig
index 04a3542..762c533 100644
--- a/profiles/cloudflare-tls.mobileconfig
+++ b/profiles/cloudflare-tls.mobileconfig
@@ -19,6 +19,21 @@
ServerName
one.one.one.one
+ OnDemandRules
+
+
+ Action
+ Connect
+ InterfaceTypeMatch
+ Cellular
+
+
+ Action
+ Connect
+ URLStringProbe
+ http://captive.apple.com/hotspot-detect.html
+
+
PayloadDescription
Configures device to use Cloudflare Encrypted DNS over TLS
PayloadDisplayName
diff --git a/profiles/dnspod-https.mobileconfig b/profiles/dnspod-https.mobileconfig
index c3150d7..36b85a6 100644
--- a/profiles/dnspod-https.mobileconfig
+++ b/profiles/dnspod-https.mobileconfig
@@ -17,6 +17,21 @@
ServerURL
https://doh.pub/dns-query
+ OnDemandRules
+
+
+ Action
+ Connect
+ InterfaceTypeMatch
+ Cellular
+
+
+ Action
+ Connect
+ URLStringProbe
+ http://captive.apple.com/hotspot-detect.html
+
+
PayloadDescription
Configures device to use DNSPod Encrypted DNS over HTTPS
PayloadDisplayName
diff --git a/profiles/dnspod-tls.mobileconfig b/profiles/dnspod-tls.mobileconfig
index f624f32..7e0ef5e 100644
--- a/profiles/dnspod-tls.mobileconfig
+++ b/profiles/dnspod-tls.mobileconfig
@@ -17,6 +17,21 @@
ServerName
dot.pub
+ OnDemandRules
+
+
+ Action
+ Connect
+ InterfaceTypeMatch
+ Cellular
+
+
+ Action
+ Connect
+ URLStringProbe
+ http://captive.apple.com/hotspot-detect.html
+
+
PayloadDescription
Configures device to use DNSPod Encrypted DNS over TLS
PayloadDisplayName
diff --git a/profiles/google-https.mobileconfig b/profiles/google-https.mobileconfig
index 4ec31a5..f3851d7 100644
--- a/profiles/google-https.mobileconfig
+++ b/profiles/google-https.mobileconfig
@@ -19,6 +19,21 @@
ServerURL
https://dns.google/dns-query
+ OnDemandRules
+
+
+ Action
+ Connect
+ InterfaceTypeMatch
+ Cellular
+
+
+ Action
+ Connect
+ URLStringProbe
+ http://captive.apple.com/hotspot-detect.html
+
+
PayloadDescription
Configures device to use Google Encrypted DNS over HTTPS
PayloadDisplayName
diff --git a/profiles/google-tls.mobileconfig b/profiles/google-tls.mobileconfig
index e78f02b..1265d13 100644
--- a/profiles/google-tls.mobileconfig
+++ b/profiles/google-tls.mobileconfig
@@ -19,6 +19,21 @@
ServerName
dns.google
+ OnDemandRules
+
+
+ Action
+ Connect
+ InterfaceTypeMatch
+ Cellular
+
+
+ Action
+ Connect
+ URLStringProbe
+ http://captive.apple.com/hotspot-detect.html
+
+
PayloadDescription
Configures device to use Google Encrypted DNS over TLS
PayloadDisplayName
diff --git a/profiles/opendns-family-https.mobileconfig b/profiles/opendns-family-https.mobileconfig
index 18346d6..34f40a1 100644
--- a/profiles/opendns-family-https.mobileconfig
+++ b/profiles/opendns-family-https.mobileconfig
@@ -12,6 +12,21 @@
ServerURL
https://doh.familyshield.opendns.com/dns-query
+ OnDemandRules
+
+
+ Action
+ Connect
+ InterfaceTypeMatch
+ Cellular
+
+
+ Action
+ Connect
+ URLStringProbe
+ http://captive.apple.com/hotspot-detect.html
+
+
PayloadDescription
Configures device to use OpenDNS Encrypted DNS over HTTPS
PayloadDisplayName
diff --git a/profiles/opendns-https.mobileconfig b/profiles/opendns-https.mobileconfig
index 5320fdb..04d4592 100644
--- a/profiles/opendns-https.mobileconfig
+++ b/profiles/opendns-https.mobileconfig
@@ -12,6 +12,21 @@
ServerURL
https://doh.opendns.com/dns-query
+ OnDemandRules
+
+
+ Action
+ Connect
+ InterfaceTypeMatch
+ Cellular
+
+
+ Action
+ Connect
+ URLStringProbe
+ http://captive.apple.com/hotspot-detect.html
+
+
PayloadDescription
Configures device to use OpenDNS Encrypted DNS over HTTPS
PayloadDisplayName
diff --git a/profiles/quad9-ECS-https.mobileconfig b/profiles/quad9-ECS-https.mobileconfig
index 59b9bf0..247cc35 100644
--- a/profiles/quad9-ECS-https.mobileconfig
+++ b/profiles/quad9-ECS-https.mobileconfig
@@ -19,6 +19,21 @@
ServerURL
https://dns11.quad9.net/dns-query
+ OnDemandRules
+
+
+ Action
+ Connect
+ InterfaceTypeMatch
+ Cellular
+
+
+ Action
+ Connect
+ URLStringProbe
+ http://captive.apple.com/hotspot-detect.html
+
+
PayloadDescription
Configures device to use Quad9 Encrypted DNS over HTTPS with ECS
PayloadDisplayName
diff --git a/profiles/quad9-ECS-tls.mobileconfig b/profiles/quad9-ECS-tls.mobileconfig
index 3c5cb46..76bb13e 100644
--- a/profiles/quad9-ECS-tls.mobileconfig
+++ b/profiles/quad9-ECS-tls.mobileconfig
@@ -19,6 +19,21 @@
ServerName
dns11.quad9.net
+ OnDemandRules
+
+
+ Action
+ Connect
+ InterfaceTypeMatch
+ Cellular
+
+
+ Action
+ Connect
+ URLStringProbe
+ http://captive.apple.com/hotspot-detect.html
+
+
PayloadDescription
Configures device to use Quad9 with ECS Encrypted DNS over HTTPS
PayloadDisplayName
diff --git a/profiles/quad9-https.mobileconfig b/profiles/quad9-https.mobileconfig
index e7f894e..b364372 100644
--- a/profiles/quad9-https.mobileconfig
+++ b/profiles/quad9-https.mobileconfig
@@ -19,6 +19,21 @@
ServerURL
https://dns.quad9.net/dns-query
+ OnDemandRules
+
+
+ Action
+ Connect
+ InterfaceTypeMatch
+ Cellular
+
+
+ Action
+ Connect
+ URLStringProbe
+ http://captive.apple.com/hotspot-detect.html
+
+
PayloadDescription
Configures device to use Quad9 Encrypted DNS over HTTPS
PayloadDisplayName
diff --git a/profiles/quad9-tls.mobileconfig b/profiles/quad9-tls.mobileconfig
index 7dc7674..9c332fe 100644
--- a/profiles/quad9-tls.mobileconfig
+++ b/profiles/quad9-tls.mobileconfig
@@ -19,6 +19,21 @@
ServerName
dns.quad9.net
+ OnDemandRules
+
+
+ Action
+ Connect
+ InterfaceTypeMatch
+ Cellular
+
+
+ Action
+ Connect
+ URLStringProbe
+ http://captive.apple.com/hotspot-detect.html
+
+
PayloadDescription
Configures device to use Quad9 Encrypted DNS over HTTPS
PayloadDisplayName
diff --git a/profiles/tiarapp-https.mobileconfig b/profiles/tiarapp-https.mobileconfig
index d610145..128f105 100644
--- a/profiles/tiarapp-https.mobileconfig
+++ b/profiles/tiarapp-https.mobileconfig
@@ -12,6 +12,21 @@
ServerURL
https://doh.tiar.app/dns-query
+ OnDemandRules
+
+
+ Action
+ Connect
+ InterfaceTypeMatch
+ Cellular
+
+
+ Action
+ Connect
+ URLStringProbe
+ http://captive.apple.com/hotspot-detect.html
+
+
PayloadDescription
Configures device to use Tiarap Encrypted DNS over HTTPS
PayloadDisplayName
diff --git a/profiles/tiarapp-tls.mobileconfig b/profiles/tiarapp-tls.mobileconfig
index bf68b54..63e3d4c 100644
--- a/profiles/tiarapp-tls.mobileconfig
+++ b/profiles/tiarapp-tls.mobileconfig
@@ -12,6 +12,21 @@
ServerName
dot.tiar.app
+ OnDemandRules
+
+
+ Action
+ Connect
+ InterfaceTypeMatch
+ Cellular
+
+
+ Action
+ Connect
+ URLStringProbe
+ http://captive.apple.com/hotspot-detect.html
+
+
PayloadDescription
Configures device to use Tiarap Encrypted DNS over TLS
PayloadDisplayName