What I learned building 9 network tools on iOS without entitlements

A few weeks ago I shipped NetDiag+, an iOS network toolkit — ping, traceroute,

DNS, whois, port/LAN scan — built entirely on BSD sockets through C-interop, with

no private entitlements. I wrote up the ping/traceroute internals here.

Then I spent a month adding 9 more tools. I expected "more of the same" — wrap a

socket, draw a SwiftUI list. Instead almost every tool turned into its own little