ktwwk The connectivity checks can only function if they occur outside the VPN. The purpose is to detect connectivity on each available network, not just through the VPN, and to handle captive portals. If you don't want to use the connectivity checks, you can turn them off. You should read the information about them in https://grapheneos.org/faq#default-connections. If you disable the checks, you should be aware that the OS will be unable to detect which networks offer working internet connectivity and you'll be unable to deal with captive portals without disabling your VPN and connecting to an HTTP site in the browser rather than being able to handle it through the OS without disabling your VPN.