Contents

Documentation/The app/Routing

What goes through the VPN, and what goes direct

Split tunneling lives in Apps & sites. Rules apply to the current connection: changing the profile does not reset them.

App screenshot: Apps & sites: what goes through the tunnel and what bypasses it
Apps & sites: what goes through the tunnel and what bypasses it

Two modes

Everything through the VPN except…

By default all traffic is in the tunnel. Exceptions: banks, government sites, local sites, the printer, specific .exe files. This is the usual choice.

VPN only for…

The other way around: the tunnel is only for what you list. The browser and downloads go direct. Makes sense when VPN is for one service.

How to add a rule

  1. 01

    Pick the mode

    Two cards at the top of the page. That decides whether your list is exceptions or “only these”.

  2. 02

    Domains and IPs

    Paste a domain (example.com), a preset, or an address. Subdomains are usually covered with the root.

  3. 03

    Apps

    Browse… picks an .exe, or paste telegram.exe / a path and press Enter. Under the field — Running now: a click adds the process. Status shows “running” and Show file in folder.

Presets and ready-made lists

Domain sets

YouTube, Instagram, Discord, ChatGPT, “Government and banks .ru” (gosuslugi, Sber, T-Bank, VTB). A domain in the field covers subdomains.

Ready-made lists

Nearly 200 lists in groups — AI, video, music, social, messengers, games, work, news, finance — with search and picks for your country. Service lists are built into the app and need no download; country block lists (Everything blocked in Russia and others) are downloaded on connect and refreshed once a day.

Russian sites direct

Only in “everything through the VPN except…”. .ru / .su / .рф, Russian services and IPs bypass the tunnel. List from GitHub, once a week. Banks and Gosuslugi then do not see a “foreign” country.

What matters

  • Apps and sites work on proxy-protocol profiles: VLESS, VMess, Trojan, Shadowsocks, Hysteria2, TUIC. WireGuard, AmneziaWG, OpenVPN and Veli take IP addresses — the ones you typed and those of the ready-made lists.
  • After Save on an already-up tunnel, press Reconnect — otherwise the old routes stay until the drop.
  • You need at least one app, site, or list — the app will not accept an empty save.
  • Game mode overrides these rules for game processes: check the Game mode page first.