macOS - VPN - IKEv2 - Split tunnel with Split DNS using IKEv2 payload option 25: SRV records do not work

Hi,

we set up a new VPN server using StrongSwan on an OPNsense Firewall. We pass IKEv2 option 25 to the connecting clients. Split tunnel and Split DNS basically works out of the box.

But today we came across a corner case. While DNS A records resolve just fine DNS SRV records do not.

Has anybody come across this problem before?

Thanks and best regards

Rainer

So this is the documentation regarding Option 25:

https://www.iana.org/assignments/ikev2-parameters/ikev2-parameters.xhtml#ikev2-parameters-21

And here is the documentation for StrongSwan in this regard:

https://wiki.strongswan.org/projects/strongswan/wiki/AppleClients