VPN - Split Tunneling

Follow

Jeremy Spring

• June 23, 2020 14:04

I have a Firewalla Red at home, and terribly slow satellite internet.   I want to use the VPN server to access my home network files from remote, but do not want all my my internet access to be tunneling through that VPN as it makes the connection unusably slow.

 

Is it possible to enable split tunneling?

0

• 

  Jack Cheng

  • July 15, 2020 04:00

  Edit your Firewalla.ovpn file and add the following before the "compress" line.

  route-nopull
  route 192.168.2.0 255.255.255.0
  route 10.100.155.0 255.255.255.0

  Replace 192.168.2.0 with your LAN IP
  Replace 10.100.155.0 with your VPN IP provided by Firewalla (Not sure if it is necessary, but it works for me)
  Add other routes you need to go through the VPN

  Save the file as new profile such as "Firewalla-split.ovpn" so that you can have the choice to split or not.

  0

  Comment actions Permalink
• 

  Firewalla

  • July 15, 2020 19:06

  Thanks Jack, linked this thread to our VPN server document!

  0

  Comment actions Permalink
• 

  Sukumar Patel

  • July 30, 2020 14:34

  What about the 4G network? How do we configure it for that?

  0

  Comment actions Permalink
• 

  Erik Dasque

  • May 27, 2022 20:48

  @Firewalla how would you go about doing this with Wireguard?

  0

  Comment actions Permalink
• 

  Firewalla

  • July 25, 2022 16:25

  You need to modify the wireguard profile, this 'split tunnel' is a function of the client. 

  example: https://www.reddit.com/r/selfhosted/comments/b5pymz/split_tunnel_in_wireguard/

   

  0

  Comment actions Permalink
• 

  Vince Balsamo

  • April 17, 2023 13:11

  @firewalla, this seems like something you guys could simplify with a simple toggle and check list of routes networks, any plans?

  2

  Comment actions Permalink
• 

  Philip Doolittle

  • July 01, 2024 16:51
  • Edited

  UPDATE:  That was my mistake. I inadvertently selected "Preferred" instead of "Legacy".  All is well now.
  
  The solution above no longer works. When connecting it complains that the "server pushed compression settings that are not allowed"

  0

  Comment actions Permalink
• 

  Firewalla

  • July 01, 2024 16:21

  @Philipe, can you reply with a screenshot? Is this from the client? is it the official wireguard app?

  1

  Comment actions Permalink
• 

  Philip Doolittle

  • July 01, 2024 16:51

  @firewalla - That was my mistake. I inadvertently selected "Preferred" instead of "Legacy".  All is well now.
  
  Also, for those using a remote MySQL app, split tunneling plus forcing UDP makes it much more responsive.

  0

  Comment actions Permalink

Please sign in to leave a comment.