VPN split tunneling: what it is and how it works

How to keep a VPN connected while selected websites or services use the normal internet connection directly.

Split tunneling means routing different traffic through different paths. Some connections use the VPN, while selected applications, domains or networks use the normal internet connection directly.

A practical example is keeping most traffic on the VPN while a service that expects the user’s normal IP address is placed in a DIRECT list. There is no need to switch the VPN off and on manually.

Split-tunneling rules must be applied on the device before traffic enters the VPN tunnel. If traffic first reaches the VPN server and is then sent out directly, the destination still sees the VPN server address.

Domain rules can use DNS and suffix matching, while more advanced setups may use IP networks or application-level rules. The exact capabilities depend on the client.

VALNEXA Smart profiles can include user-defined DIRECT exceptions for compatible clients, allowing the VPN to stay connected while selected services bypass the tunnel.