Split Tunnelling

Split tunnelling lets you choose which traffic goes through the VPN and which uses your normal internet connection — giving you the best of both worlds.

What is Split Tunnelling?

By default, when you connect to the VPN all your internet traffic is routed through VPNUK. With split tunnelling, you can configure specific apps or IP addresses to use your local internet connection instead.

Example: Route Netflix and banking through the VPN (UK IP) while your local Spotify or printer traffic uses your direct connection.

OpenVPN: Remove Default Route

By default OpenVPN sets a redirect-gateway def1 which routes all traffic through the VPN. To use split tunnelling, remove or comment out this line in your config and add specific routes instead:

# Remove this line to disable full tunnel:
# redirect-gateway def1

# Add specific routes through VPN:
route 185.168.0.0 255.255.0.0

Contact our team for specific route recommendations for your use case.

WireGuard: AllowedIPs

In WireGuard, the AllowedIPs directive controls which traffic is routed through the tunnel. The default 0.0.0.0/0 routes everything. To split tunnel, specify only the IP ranges you want through the VPN:

# Only route specific subnets through VPN:
AllowedIPs = 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16

Need help with split tunnelling?

Our team can provide a custom config for your exact requirements.

Submit a Support Ticket