Free Split Tunneling Config Helper
Prepare split-tunneling guidance or routing fragments for your chosen VPN provider, platform and traffic rules.
Create Your Split Tunneling Configuration
Split tunneling allows you to route some of your traffic through your VPN while other traffic goes through your regular internet connection. This tool provides provider setup checklists and routing fragments for existing OpenVPN/WireGuard profiles. It cannot change device settings or discover installed executables. Before choosing a provider, use our VPN Comparison Tool to compare available features.
How to use this tool
Follow these steps to get observations you can interpret and act on.
Select your provider and platform
Choose the VPN client and operating system you actually use. Check the generated official-source guidance for that combination.
Define the traffic rules
Select the supported mode and add applications, domains or IP ranges as appropriate. Review whether each item is included in or excluded from the tunnel.
Review before applying
Generate and inspect the output. Preserve your existing working profile, apply only supported settings in the VPN client, then test the affected applications.
How the split tunneling config helper works
The helper uses your selected provider, operating system and routing choices to generate guidance or supported configuration fragments. App exclusions, website exceptions and IP routes are different features. The provider-specific output and linked official source explain the relevant platform support.
Understanding your results
- Include mode sends only selected traffic through the VPN; exclude mode leaves selected traffic outside it. Availability varies by client and platform.
- OpenVPN and WireGuard output is a routing fragment for an existing working profile, not a complete account configuration or a connection established by this website.
- Website names can resolve to changing or shared IP addresses. An IP route should not be assumed to reproduce application-based or domain-based routing.
Privacy & important limitations
- Generation runs in your browser. The helper does not install routes, change your VPN app or verify the resulting system configuration automatically.
- Traffic outside the VPN follows its direct route. Check IPv4, IPv6 and DNS separately after applying rules, and follow any organization policy that governs the device.
Treat the output as configuration guidance. Verify client support and observed routes before relying on it for sensitive traffic.
Frequently asked questions
Will the generated output connect my VPN?
No. You need an existing working VPN profile and the settings supported by your client. The output provides guidance or route fragments to review and apply yourself.
How do I verify the rules worked?
Open the affected applications, compare their observed public addresses where possible, and test connectivity and DNS. A browser test cannot verify the route of every other app.