---
title: "swdownload.apple.com: what it is and what breaks if you block it · Kilobat"
url: "https://kilobat.app/hosts/swdownload-apple-com"
description: "swdownload.apple.com is an Apple host for macOS update downloads. Why it uses data, and what breaks if you block it."
---

Updates and downloads

# swdownload.apple.com

`swdownload.apple.com` is an Apple host for macOS updates. Apple lists it for macOS only, on ports 443 and 80, and says that it supports proxies.

Run by Apple · Ports: 443 and 80 TCP · Checked: 1 November 2026

## Short answer

An Apple host for macOS update downloads. Apple says that it works through proxies.

Block with care

Blocking it can stop macOS updates downloading. Turn off automatic downloads instead, then update on your usual network.

Matches

`swdownload.apple.com`

A name with `*.` covers every name under it: `*.push.apple.com` matches `1-courier.push.apple.com`.

## What it serves

Apple's enterprise host list names `swdownload.apple.com` in its Software updates section, for “macOS updates”, and marks it as supporting proxies.

Its name points to downloads. Large transfers from it are most likely macOS update content.

On a Mac, [`softwareupdated`](https://kilobat.app/processes/softwareupdated) handles macOS updates, so its connections here belong to Software Update.

## Processes that use it

- [softwareupdated](https://kilobat.app/processes/softwareupdated): Part of macOS. It checks for and downloads macOS updates, security responses and system files.

## What breaks if you block it

Block with care

Blocking it can stop macOS updates downloading. Turn off automatic downloads instead, then update on your usual network.

What breaks if you block it

- macOS update downloads may fail, so security fixes wait.

With Kilobat Pro and the network filter, you can block a host for every app or for one app: in Connections, select a connection and choose Block. Apple’s own services are never blocked by Kilobat’s [Protection](https://kilobat.app/docs/blocking#protection) lists.

## Notes

Apple says that its services fail connections that use HTTPS interception. Exclude its hosts from TLS inspection.

On a metered network, Kilobat Pro with the network filter pauses macOS Software Update downloads.

## Apple’s rules for its hosts

Apple’s list, [Use Apple products on enterprise networks](https://support.apple.com/en-us/101555), says that devices open these connections, not Apple’s servers. Apple services fail any connection that uses HTTPS interception, so a proxy that inspects TLS should leave Apple’s hosts alone.

If a firewall allows hosts by name, allowing `*.apple.com` covers most Apple services, Apple says. A firewall that works only with addresses can allow `17.0.0.0/8` for IPv4, and `2403:300::/32`, `2620:149::/32` and `2a01:b740::/32` for IPv6.

To see which app on your Mac opened a connection to this host, use Kilobat’s Connections tab, or the [agent network log](https://kilobat.app/docs/agents#agent-network-log) for AI agents.

## Sources

- [Apple Support: Use Apple products on enterprise networks](https://support.apple.com/en-us/101555)
- [Kilobat docs: Pausing updaters on metered networks](https://kilobat.app/docs/usage#updaters)

Checked on 1 November 2026.

## Related

- [swcdn.apple.com](https://kilobat.app/hosts/swcdn-apple-com): Apple's host for macOS update downloads. Big transfers from it are macOS updates.
- [updates.cdn-apple.com](https://kilobat.app/hosts/updates-cdn-apple-com): Apple's hosts for software update downloads, over HTTPS and plain HTTP, for all Apple platforms.
- [Stop Software Update downloading on a hotspot](https://kilobat.app/guides/software-update-on-hotspot)
- [Stop updates from using hotspot data](https://kilobat.app/guides/recipes/stop-updates-on-hotspot)