Configuring a VPN with includeAllNetworks causes CarPlay / Netflix Cast. Even enabling excludeLocalNetworks does not resolve this issue. Is this a known issue and can we work around this?

We see an issue where it seems like the Network Extension process freezes. We have logging implemented in our PacketTunnel. When a user goes to sleep and sets their device down. Occasionally when they wake up the packettunnel process no longer seems to be running. The last log lines seem to always occur sometime past midnight. We do log on device sleep and wake but those log lines do not seem to occur any longer. Does anyone have experience with such an issue?

When trying to bind a socket to the tunnel interface via setsockopt(socket, IPPROTO_IP, IP_BOUND_IF, &ifindex, len) Within the PacketTunnel itself despite this call succeeding the data is still routed through the default interface. This is observed when includeAllNetworks is true. When it is false it seems to send it on both interfaces. Is there something wrong with how I'm doing it?

Hello, I'm trying to understand a particular behaviour of NetworkExtension. When I reboot the device the VPN Profile is set onDemand(true) but it seems that prior to first unlock it does not attempt to connect. Is there no way to make VPNs connect prior to first unlock? If not is there any traffic allowed prior to unlock AKA traffic is allowed outside of the tunnel prior to first unlock?