What Is VPN Split Tunneling?

Split tunneling lets you route only some of your traffic through a VPN while it's connected. Here's how it works.

What split tunneling is

While connected to a VPN, only some traffic β€” such as your company's internal network β€” is routed through the VPN tunnel, while the rest, like ordinary web browsing, goes straight out over your normal internet connection instead of through the VPN.

How it differs from full tunneling

Full tunneling encrypts every bit of traffic leaving your device by routing it through the VPN server. Split tunneling, by contrast, sends only chosen destinations β€” specific addresses, apps, or domains β€” through the VPN, letting everything else go out normally.

Benefits

You keep access to local devices like a home printer or NAS, latency-sensitive services like streaming or video calls stay fast over your local connection, and the load on the company's VPN server is reduced since it isn't handling all your traffic.

Drawbacks and the security trade-off

Traffic that doesn't go through the VPN isn't encrypted by it and falls outside the company's security monitoring. That means sensitive activity carried out on public Wi-Fi with split tunneling turned on may not get the VPN's protection.

A remote-work example

Setting only your company's internal system addresses to route through the VPN, while the rest of your internet uses your home connection directly, keeps video calls and streaming fast while still securely reaching the internal resources you need.

Support and what to check before setting it up

Not every VPN client supports split tunneling, and even when it does, the setup method β€” by app, by IP range, or by domain β€” varies from service to service. If it's a VPN provided by your employer, check your IT department's policy or documentation first.

Revisit VPN basics if you need to

If you're curious about the underlying mechanics of how a VPN encrypts your traffic, it's worth looking into how VPNs work at a basic level before diving into split tunneling specifically.

Setting up a VPN for remote work

If you're wondering about the actual steps for connecting to a company VPN, it's worth checking how to set up and connect a remote-work VPN alongside deciding whether split tunneling fits your situation.

Frequently Asked Questions

Does split tunneling defeat the purpose of using a VPN?

No. Traffic you need protected β€” such as access to an internal network β€” still goes through the VPN and stays encrypted; only the remaining ordinary traffic leaves the VPN, so when it's designed around your actual needs, it works well without undermining the VPN's purpose.

Do some companies block split tunneling?

Yes β€” companies with a security policy that requires monitoring all traffic through the VPN sometimes disable split tunneling entirely and allow only full tunneling.