Plan VPN split-tunneling rules

Review each rule against your device and VPN app

Split tunneling can mean that selected traffic uses the VPN while other traffic follows the ordinary network path. The available rule types and their meaning depend on the platform and VPN app. Android's documented per-app VPN model, for example, distinguishes an allow list from a disallowed-app list. Do not assume those Android controls describe Windows, iOS, a router, or another provider's app.

For every item marked “outside the VPN,” consider which network and destination may see that connection's metadata and public source address. HTTPS can still protect page contents between an app and a website, but does not put the excluded connection inside the VPN tunnel. If blocking non-VPN connections is enabled, an excluded app may lose connectivity instead of using the ordinary route.

Before applying a setting, check the current instructions for your exact operating system and VPN app. Confirm whether its list includes or excludes named apps, whether the rule applies to browser traffic or all device traffic, and how it interacts with a kill switch. Test only a non-sensitive task. This planner's summary is a record of your intent, not a compatibility check or proof of the route taken.

How it works

Enter up to eight non-sensitive labels and mark each as intended through the VPN, outside the VPN, or undecided. The page groups your choices locally; check your operating system and VPN app documentation before applying any setting.