Interestingly, after more investigation it seems that this occurs after a jetsam event. We don't see this happening on every device, mostly iOS 16+ devices. This did not happen prior. We suspect that there might be an issue unrelated to our process.

One thing to note is that createTCPConnectionThroughTunnel does not work when includeAllNetworks is enabled. A previous post noted this issue as well see here

That makes sense, thank you very much

Hi, the bug number is FB11285432

Sent the report to Feedback Assistant, thanks for confirming that this is not in fact expected

Because it’s critical that your VPN protect that traffic? Yes it is critical that my app protects this traffic as well. Yes, and no. You can do this with Always-on VPN, but that’s not available to third-party VPN products (r. 33804980) What is 33804980? And can we request for an enhancement to allow third-party products to be able to do this prior to first unlock?