Thank you for responding. We followed the steps in the post you provided. We could see the logs from the PacketTunnelProvider init but it never got to the startTunnel method. So the NetworkExtension is initialized, but it isn't started.

Great, thank you Eskimo for pointing me in the right direction.