Wow, this is odd… I cannot seem to capture any requests to that gateway in Wireshark at all when using the launcher. I was able to capture the traffic from Chrome no problem.
Oh… looking closer and removing my host filter, I think I see an initial SYN request on IPV6, source ::1, dest ::1… a little further down this gets to a TLS hello that fails.
If I jump back on a “full” VPN I am seeing a bunch of IPV6 traffic, then switch over to IPV4.
Is this something in the Java networking stack that is always trying IPV6 first? Any other ideas? Thanks for the help, definitely closer to figuring it out.