Apps and sites

Only what you choose goes through the VPN

Your bank and government services open directly, YouTube and AI chats go through the tunnel. Add apps, sites and addresses or pick ready-made sets — the rules work for every profile at once, or each profile gets its own.

Apps and sitesAll profiles
Everything through VPN, except…Only these through VPN…

the rest goes direct

Apps

Telegram openDiscord

Sites

youtube.comchatgpt.comAI chats set

IP addresses and subnets

Telegram set91.108.4.0/22
Save

Two ways

Everything through the VPN, or only your picks

Each way keeps its own lists, so switching loses nothing. The switch is also in the tray and in the command palette (Ctrl+K).

Everything through VPN, except…

The tunnel protects all traffic, and whatever you list goes around it.

  • your bank won't let you in from a foreign address
  • the printer, router and network drive must stay on the local network
  • a game or a torrent client only suffers inside the tunnel

Only these through VPN…

Only what you list goes through the tunnel; everything else goes direct at full speed.

  • you need a couple of blocked services, not the whole internet
  • ready-made sets: «AI chats», «Video and film», what's blocked in your country
  • a slow server shouldn't slow down everything else

Three lists

Apps, sites and addresses

Each list is filled the way that suits it, and the rules work together.

Apps

The picker shows what is open now, what is installed and what runs in the background. You can also point at a file or type a process name.

  • running apps are marked with a dot
  • icons and search by name
  • process name or path to the file

Sites

A domain is enough: youtube.com comes with all its subdomains. The app drops https:// and «*.» itself and moves an IP address to the address list.

  • a domain with its subdomains
  • ready-made lists of services
  • quick sets for your country

IP addresses and subnets

An address, a subnet, IPv6 or a range. A long list can be pasted in one go or loaded from a file.

  • 1.2.3.4, 10.0.0.0/8 or a range
  • paste a list or load .txt, .lst, .csv
  • address sets: Telegram, Google, game networks

Ready-made sets

No need to hunt for domains

A service is one checkbox away: all its domains and addresses are already in the set. The catalog updates from the server every day.

Ready-made site lists work in «Only these through VPN…»; address sets work in both ways.

  • AI chats
  • Video and film
  • Music
  • Social networks
  • Messengers
  • Games
  • Russian services
  • Country lists

For Russia

Russian sites and apps — direct

Banks, government services, marketplaces and Yandex often refuse foreign addresses. One switch, and they go around the tunnel — no lists to keep by hand.

Russian sites direct

Russian sites direct

The .ru, .su and .рф domains, Russian services and addresses of Russian networks.

Russian apps direct

Banks, Gosuslugi, Yandex, VK, marketplaces and 1C — the app finds them itself, even ones installed later.

The network list updates itself

Addresses of Russian networks ship with the app and refresh from the server.

With Premium, Russian sites always go direct — your bank and Gosuslugi won't lock you out.

Per profile

Shared rules — and your own where you need them

One set of rules for every profile is usually enough. If a work server needs different ones, give it its own set.

All profiles

Shared rules apply wherever a profile has none of its own.

A set for a profile

A new set starts as a copy of the shared rules — change only what differs. A Premium country can be picked as a whole.

You see what's active

A green dot on the tab marks the set in force right now; the profile in the list gets an «Own rules» label.

Frequently asked

Is this split tunneling?

Yes. Other VPNs call it split tunneling: part of the traffic goes through the tunnel, part goes direct. In Veli VPN it's the «Apps and sites» section of the app menu.

Which protocols does it work on?

IP addresses and subnets work everywhere. Apps and sites work on VLESS, VMess, Trojan, Shadowsocks, Hysteria2 and TUIC; for WireGuard, AmneziaWG and OpenVPN use addresses. On Veli, Russian sites and addresses go direct and the rest goes through the tunnel.

Do I need to reconnect after a change?

Rules are applied when the connection is built. If the tunnel is already up, the app offers a one-click reconnect.

How do I move the rules to another computer?

Rules are part of the settings backup: save it on one computer and restore it on the other. Addresses can also simply be pasted as a list or loaded from a file.

Is this in the free version?

Yes, everything on this page is in the free client, with your own servers and any configs. Premium adds our nodes and the Veli protocol.

Make the VPN fit you

The client is free, with no sign-up. Ready-made sets and Russian sites direct work from the first launch.