@meaton Yes you are correct, we always want to land the notification in the container app. The notification is generated and pushed locally from NEPacketTunnelProvider (based on response from the server), not from a remote server