GeoIP Routing Explained: Smart Traffic Management

GeoIP routing is a powerful feature that lets you send specific regional traffic directly to the internet while keeping everything else protected through your VPN. This guide explains how GeoIP routing works and how to use it effectively.

TL;DR (Quick Summary)

• GeoIP routing sends selected regional IP traffic directly (bypasses VPN)
• Improves compatibility with local services (banking, streaming, apps)
• Rest of your traffic remains protected through VPN
• Available regions: CN, US, JP, KR, RU, IR, ID, AE
• Configured in FreeGuard PC → Settings → GeoIP Region

What Is GeoIP Routing?

GeoIP routing is a form of split tunneling based on geographic IP addresses. It allows you to:

• Route traffic destined for specific countries directly (DIRECT)
• Route everything else through the VPN tunnel

Visual Explanation

Without GeoIP Routing:
ALL Traffic → VPN Tunnel → Internet

With GeoIP Routing (e.g., CN region):
├── Traffic to China IPs → DIRECT → China Services
└── All Other Traffic → VPN Tunnel → Internet

Why It Matters

When you’re in a country and use VPN, local services may not work properly:

How GeoIP Routing Works

The Technical Process

1. IP Database: FreeGuard maintains updated databases of IP ranges by country
2. Rule Injection: When you select a region, FreeGuard adds routing rules
3. Traffic Matching: Each connection is checked against the rules
4. Routing Decision: Matching traffic goes DIRECT; everything else goes through VPN

Rule Provider Updates

FreeGuard uses Loyalsoldier’s GeoIP data, updated daily:

Schedule: Daily automatic update
Source: MaxMind GeoLite2 + corrections
Accuracy: High (95%+ for major services)
Format: MRS (Mihomo Rule Set)

What Gets Routed Direct

When you enable GeoIP routing for a region:

• IP addresses registered to that country
• CDN endpoints serving that region
• Local service infrastructure

What stays on VPN:

• All international traffic
• Unknown/unclassified IPs
• Your DNS queries (by default)

Supported Regions

Setup Guide

Step 1: Open Settings

1. Launch FreeGuard VPN on your PC
2. Click the Settings gear icon

Step 2: Find GeoIP Region

1. Scroll to find GeoIP Region
2. Click the dropdown menu

Step 3: Select Your Region

1. Choose the appropriate region (e.g., CN, US, JP)
2. Or select Off to disable

Step 4: Save and Reconnect

1. Click Save
2. Reconnect to VPN if already connected
3. Changes take effect immediately

Use Cases and Scenarios

Scenario 1: Living Abroad, Need Local Banking

Situation: You’re a US citizen living in Europe, need US bank access

Problem: US banks may block or flag foreign IP logins

Solution:

1. Connect to FreeGuard
2. Enable GeoIP: US
3. US banking traffic goes direct (your real IP)
4. Everything else protected by VPN

Result: Bank sees your real location, no security flags

Scenario 2: In China, Need Local Services + International Access

Situation: Traveling in China, need both Chinese and international services

Problem: VPN blocks Chinese services; no VPN blocks international

Solution:

1. Connect to FreeGuard
2. Enable GeoIP: CN
3. Chinese services work normally (direct)
4. International services through VPN

Result: Best of both worlds

Scenario 3: Gaming with Regional Content

Situation: Playing games with region-specific content

Problem: Game detects VPN, locks certain features

Solution:

1. Enable appropriate GeoIP region
2. Game traffic goes direct
3. Other browsing protected

Scenario 4: Work VPN + Personal Privacy

Situation: Need to access work resources and personal browsing

Problem: Work requires local IP; personal browsing needs privacy

Solution:

1. Connect to FreeGuard
2. Enable GeoIP for your work region
3. Work apps see your real IP
4. Personal browsing through VPN

GeoIP vs Full Split Tunneling

GeoIP routing is simpler but less granular. It routes based on where traffic goes, not which app sends it.

Combining GeoIP with Protocol Selection

GeoIP routing works with all three protocols:

Recommended combination:

• AnyTLS + GeoIP for daily use with local services
• Trojan + GeoIP in restricted regions

Troubleshooting

Local Service Still Not Working

Problem: Enabled GeoIP but local service still fails

Possible causes:

1. Service uses CDN with different IPs
2. Service checks more than just IP
3. DNS resolution issue

Solutions:

1. Clear browser cache/cookies
2. Try a different browser
3. Check if service requires login from same region consistently
4. Contact service support if persistent

Some Sites Within Region Still Going Through VPN

Problem: Not all traffic for the region goes direct

Why: GeoIP databases aren’t 100% complete. Some IPs may be:

• Recently allocated
• Using third-party CDNs
• Miscategorized

Workaround: This is expected behavior. Critical services should work; edge cases may vary.

Can’t Tell If GeoIP Is Working

Test method:

1. With GeoIP enabled, visit a regional service
2. Check if it works normally
3. Then visit ipinfo.io - should show VPN IP
4. If regional service works + ipinfo shows VPN → GeoIP working

Performance Impact

Question: Does GeoIP routing slow things down?

Answer: Minimal impact:

• Direct traffic: Faster (no VPN overhead)
• VPN traffic: Same as before
• Rule checking: Negligible (microseconds)

Security Considerations

What’s Protected, What’s Not

*By default, DNS goes through VPN even for GeoIP-matched traffic

When NOT to Use GeoIP

• Public Wi-Fi: You may want ALL traffic protected
• Sensitive browsing: If local ISP monitoring concerns you
• Maximum anonymity: Any direct traffic reveals your IP

Safe GeoIP Use

✅ Good for:

• Accessing trusted local services (your bank)
• Regional apps that require local IP
• Improving compatibility while maintaining general privacy

❌ Avoid for:

• Untrusted public networks
• When maximum privacy is priority
• If you don’t need local services

Advanced: How Rules Are Injected

For technically curious users, here’s what happens:

# Rule provider added for selected region
rule-providers:
  geoip-cn:
    type: http
    behavior: ipcidr
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/geoip@release/text/cn.txt"
    interval: 86400

# Rule added to routing
rules:
  - RULE-SET,geoip-cn,DIRECT
  - MATCH,PROXY

This happens automatically when you select a region in settings.

Frequently Asked Questions

Can I select multiple regions?

Currently, FreeGuard supports one region at a time. If you need multiple, choose the most important one for direct access.

Does GeoIP affect my phone if I share VPN from PC?

Yes. Devices using your PC’s shared VPN connection will also have GeoIP routing applied.

Will my ISP see what I’m doing on direct traffic?

Yes. Direct traffic goes through your ISP normally, without VPN encryption. This is why you should only enable GeoIP for trusted local services.

Can websites detect I’m using split routing?

Potentially, if they compare your direct IP with patterns. Most services don’t do this level of checking.

Is GeoIP routing the same as a proxy exception?

Similar concept, different implementation. GeoIP is based on destination IP geography rather than specific domains or apps.

Next Steps

• Download FreeGuard to try GeoIP routing
• View pricing plans for full features
• Split Tunneling Guide for more routing options
• Regional Bypass Scenarios for practical examples
• Protocol Selection for combining with protocols

Last updated: January 2026