# --- Apple Private Relay + iCloud essential domains ---
mask.icloud.com
mask-h2.icloud.com
mask.apple-dns.net
mask.apple.com.edgesuite.net
mask-api.fe.apple-dns.net
mask-api.fe6.apple-dns.net

# --- General iCloud services required for device sync/login ---
gateway.icloud.com
gs.apple.com
setup.icloud.com
configuration.apple.com
xp.apple.com
identity.ess.apple.com
identity.icloud.com
client.ess.apple.com
appleid.apple.com
pki.apple.com

# --- Push notifications and messaging ---
courier.push.apple.com
feedback.push.apple.com
push.apple.com

# --- App Store and updates ---
itunes.apple.com
appstoreconnect.apple.com
apps.apple.com
buy.itunes.apple.com
init.itunes.apple.com

# --- Device activation / telemetry necessary for functionality ---
mesu.apple.com
gdmf.apple.com
deviceenrollment.apple.com
mdmenrollment.apple.com