Will definitely file bug for clarification. Actually, I verified for another flow where FilterDataProvider is responding with NEFilterNewFlowVerdict.allow() & TransparentProxyProvider is responding with NO. So both FilterDataProvider & TransparentProxyProvider are not interested in this flow, still we see the log line (NetworkExtension) [com.apple.networkextension:] provider rejected new flow TCP headless_shell[{length = 20, bytes = 0xe69023e655b6065e1a2f94fa508807fa43f6ac8a}] remote: 100.72.0.3:443 interface utun9 posted by NetworkExtension framework. Is this logline faulty or not to be taken at its face value ?? This really causes confusion amongst customers when they are trying to debug any network issues.

Created FB18722461 (Request for an API to query OS Name)