@eskimo, regarding your comment about applying "backpressure", I also read the following: https://developer.apple.com/documentation/networkextension/app_proxy_provider/handling_flow_copying#3698838 What I don't understand is whether we should count the total number of bytes that are pending to be written from ALL open flows before applying backpressure or whether each flow should be considered in isolation. If it is the first, should we suspend reads from ALL flows until the buffer decreases?