[dqh]

It's possible to build a macOS app that manages an IKEv2 connection using the public NEVPNManager, NEVPNProtocolIKEv2 and related APIs. This also gives you full control over DH group, algorithms, dead peer detection etc.