https://developer.apple.com/documentation/driverkit
It should provide an API that allows the easy creation and destruction of tap devices, preferably integrate nicely with the Mac network management stuff (so they show up as normal ports). Support for some kind of zero-copy I/O and other high performance patterns is needed, and security is important. It should be able to be included in the App Store assuming Apple allows DriverKit extensions in there.