OpenConnect VPN — Rule Packages

Distribution endpoint for the OpenConnectVPN iOS / macOS app. Consumed by the in-app Diagnose → Remote Rule Packages feature.

Endpoints

• /manifest.json — package index (version + SHA256)
• /packages/<id>.list — individual Surge-format rule files

Cache policy

• manifest.json — max-age=300 (5 min)
• packages/*.list — max-age=86400 (1 day, SHA-pinned)

Client flow

1. Fetch /manifest.json every 5 min
2. Compare version with cached → if newer, proceed
3. For each package with changed SHA256: download .list
4. Verify SHA256 matches manifest → commit to local cache
5. User sees "N packages updated" notification

Source: HenWorks/openconnect-rules · Built by GitHub Actions, served from Cloudflare Pages. · Derived from community-maintained lists.