diff --git a/README.md b/README.md
index 65debc6..64afada 100644
--- a/README.md
+++ b/README.md
@@ -147,6 +147,10 @@ The goal of this module is packaging up a black box implementation of a [NEPacke
 
 Currently, the extension supports VPN over both [UDP][ne-udp] and [TCP][ne-tcp] sockets. A debug log snapshot is optionally maintained and shared to host apps via the App Group container.
 
+### LZO
+
+Due to the restrictive license (GPLv2), LZO support is provided as an optional subspec.
+
 ## License
 
 ### Part I
diff --git a/TunnelKit.podspec b/TunnelKit.podspec
index 7be89ef..e08b871 100644
--- a/TunnelKit.podspec
+++ b/TunnelKit.podspec
@@ -12,6 +12,8 @@ Pod::Spec.new do |s|
     s.ios.deployment_target = "11.0"
     s.osx.deployment_target = "10.11"
 
+    s.default_subspecs = "Core", "AppExtension"
+
     s.subspec "Core" do |p|
         p.source_files          = "TunnelKit/Sources/Core/**/*.{h,m,swift}"
         p.private_header_files  = "TunnelKit/Sources/Core/**/*.h"
@@ -31,4 +33,13 @@ Pod::Spec.new do |s|
         p.dependency "TunnelKit/Core"
         p.dependency "SwiftyBeaver"
     end
+
+    s.subspec "LZO" do |p|
+        p.source_files          = "TunnelKit/Sources/Core/LZO.h",
+                                  "TunnelKit/Sources/Core/Errors.{h,m}",
+                                  "TunnelKit/Sources/LZO/**/*.{h,m,c}"
+        p.private_header_files  = "TunnelKit/Sources/Core/LZO.h",
+                                  "TunnelKit/Sources/LZO/lib/*.h"
+        p.pod_target_xcconfig   = { "APPLICATION_EXTENSION_API_ONLY" => "YES" }
+    end
 end