Installing Network Extension drops ongoing connections

Hey all!

I have a System Extension that, while doing some other things, starts up my custom Network Extension via [NEProvider startSystemExtensionMode]. This Network Extension contains a class (let's call it MyDataProvider) that overrides the NEFilterDataProvider interface and implements handleNewFlow. MyDataProvider thus acts as a network content filter.

The problem is that installing my System Extension on a Ventura 13.4 (or older) system and starting up the Network Extension seemingly drops any ongoing connection I have. For example, my ssh connection will hang. This makes it quite annoying attempting to install the System Extension remotely.

I do not see this behavior for my other class that inherits the NEFilterPacketProvider interface.

Is this behavior expected of the NEFilterDataProvider? It seems like a bug since I do not see any documentation stating this behavior.

Installing Network Extension drops ongoing connections
 
 
Q