VPN: excludedRoutes IPs are going via virtual adapter

[iOS 17] We are trying to configure below Tunnel Provider configuration and we are saving it in NETunnelProviderManager preferences before calling startTunnelWithOptions

tunnelProvider.protocolConfiguration.includeAllNetworks = YES;

tunnelProvider.protocolConfiguration.excludeLocalNetworks = NO;

tunnelProvider.protocolConfiguration.enforceRoutes = NO;

We are adding an IP in the excludeRoutes which belongs to server address[10.97.6.244]. Please refer the below network settings for VPN

    IPv4Settings = {
    configMethod = manual
    addresses = (
        10.97.4.188,
    )
    subnetMasks = (
        255.255.255.255,
    )
    includedRoutes = (
        {
            destinationAddress = 0.0.0.0
            destinationSubnetMask = 0.0.0.0
        },
    )
    excludedRoutes = (
        {
            destinationAddress = 10.97.6.244
            destinationSubnetMask = 255.255.255.255
        },
    )
    overridePrimary = NO
}

Issue: when we are trying to access server address, it's getting tunneled because of that few of our APIs are sending failure and we are unable to connect to VPN.

Expected Results : excludedRoutes IPs should go via physical interface.

STEPS TO REPRODUCE

1. Configure VPN packet tunnel provider config as mentioned above and add some IPs in excludeRoutes
2. Save the configuration to NETunnelProviderManager preferences using “saveToPreferencesWithCompletionHandler”
3. Try to connect to VPN
4. excludeRoutes are tunneled via VA