Split Tunneling Guide: Selective VPN Routing

Split tunneling allows you to choose which traffic goes through your VPN and which accesses the internet directly. This comprehensive guide covers everything you need to know about selective routing with FreeGuard VPN.

TL;DR (Quick Summary)

• Split tunneling routes some traffic through VPN, some directly
• Benefits: Better speeds for local services, maintain VPN for privacy
• FreeGuard 的做法：Android 上提供按應用程式代理（免費），而直接下載的桌面應用程式則依目的地區域進行 GeoIP 路由
• Use cases: Local banking, regional streaming, work applications
• 設定：Android：網路設定 → 「應用程式代理篩選」；Windows 和 Mac（直接下載版）：設定 → GeoIP 區域 → 選擇一個區域

What Is Split Tunneling?

Split tunneling divides your internet traffic into two paths:

Your Device
    │
    ├── Protected Traffic → VPN Tunnel → Secure Access
    │
    └── Direct Traffic → Normal Internet → Local Services

Types of Split Tunneling

FreeGuard 內建其中兩種功能：直下載版桌面應用程式中的 GeoIP 型分流 VPN 會根據流量的地理目的地進行路由，而 Android 上免費的 按應用程式設定代理 可讓你選擇哪些應用程式使用 VPN。

Why Use Split Tunneling?

Benefits

When Split Tunneling Helps

Problem 1: Bank blocking VPN

Without split tunneling:
Bank → Sees VPN IP → "Suspicious login attempt" → Blocked

With split tunneling (bank's region enabled):
Bank → Sees your real IP → "Normal login" → Allowed

Problem 2: Local streaming service

Without split tunneling:
Local service → Detects foreign VPN IP → "Not available in your region"

With split tunneling:
Local service → Sees your real regional IP → Content plays normally

Problem 3: Work requires local IP

Without split tunneling:
Work system → VPN IP doesn't match policy → Access denied

With split tunneling:
Work system → Your real local IP → Access granted

How FreeGuard’s GeoIP Routing Works

The Process

1. You select a region (e.g., US, CN, JP)
2. FreeGuard loads IP database for that region
3. Traffic is analyzed: Where is it going?
4. Routing decision:
   • Destination in selected region → DIRECT
   • Everything else → VPN TUNNEL

Example: GeoIP CN Enabled

Traffic to Alipay (China IP) → DIRECT → Works normally
Traffic to WeChat (China IP) → DIRECT → Works normally
Traffic to Google (US IP) → VPN → Protected access
Traffic to Netflix (US IP) → VPN → Protected access
Traffic to Unknown site → VPN → Protected by default

Setting Up Split Tunneling

Basic Setup (GeoIP)

1. Open FreeGuard on your PC
2. Go to Settings
3. Find GeoIP Region
4. Select your region (CN/US/JP/KR/RU/IR/ID/AE)
5. Save and Reconnect

Choosing the Right Region

Disabling Split Tunneling

1. Go to Settings
2. Set GeoIP Region to Off
3. Save and Reconnect
4. All traffic now goes through VPN

Advanced Split Tunneling Scenarios

Scenario 1: Expat Banking Access

Situation: American living in Germany, needs Chase Bank access

The problem: Chase flags logins from German VPN servers

Solution:

1. Connect to FreeGuard (server doesn’t matter)
2. Enable GeoIP: US
3. Chase traffic goes direct (your German IP)
4. Other US sites work through VPN

Wait, why does this work?

Chase just wants consistent login patterns. Your German IP is fine as long as it’s consistent. The VPN IP changing each time was the trigger.

Scenario 2: Gaming with Regional Content

Situation: Playing game with Japan-only events while abroad

The problem: Game detects VPN, locks regional content

Solution:

1. Enable GeoIP: JP
2. Game server traffic goes direct
3. General browsing protected
4. Regional content accessible

Scenario 3: Work + Personal Separation

Situation: Remote worker needs work VPN and personal privacy

Challenge: Work requires specific regional IP

Solution:

1. Enable GeoIP for work region
2. Work applications see direct IP
3. Personal browsing through FreeGuard
4. Maintain separation

Scenario 4: China Travel

Situation: Visiting China, need both local and international access

Challenge: VPN for international; direct for Chinese services

Solution:

1. Use Trojan protocol (best for China)
2. Enable GeoIP: CN
3. WeChat, Alipay work (direct)
4. Google, social media work (VPN)

Split Tunneling Security Considerations

What’s Protected vs Exposed

Security Best Practices

✅ Do:

• Only enable GeoIP for trusted local services
• Keep sensitive browsing on VPN
• Disable GeoIP on untrusted networks

❌ Don’t:

• Enable GeoIP just for speed gains
• Use split tunneling on public Wi-Fi
• Route sensitive personal data directly

When to Avoid Split Tunneling

• High-security browsing: Journalism, activism, sensitive research
• Public networks: Airports, cafes, hotels
• Unknown networks: Friends’ Wi-Fi, conference networks
• Maximum anonymity: When you need complete privacy

Troubleshooting Split Tunneling

Issue: Local Service Still Blocked

Symptoms: GeoIP enabled but service doesn’t work

Causes:

1. Service uses CDN in different country
2. Service performs additional checks
3. IP database doesn’t include all IPs

Solutions:

1. Clear cookies and cache
2. Try different browser
3. Some services may have additional blocks

Issue: VPN Traffic Slower Than Expected

Symptoms: With GeoIP enabled, VPN traffic seems slower

Cause: Normal variation, or comparing to direct traffic

Reality check: Direct traffic (GeoIP) is always faster than VPN traffic. This is expected.

Issue: Not Sure If Working

Test method:

1. Enable GeoIP for a region
2. Visit a service in that region → Should work
3. Visit ipinfo.io → Should show VPN IP
4. If both work correctly → Split tunneling working

Issue: Some Sites Within Region Go Through VPN

Cause: IP database gaps for some services

Explanation: Not every IP in a country is in the database. Some may be:

• Recently allocated
• Third-party CDN
• Miscategorized

This is normal and doesn’t indicate a problem.

Comparing Split Tunneling Approaches

GeoIP vs App-Based

GeoIP vs Domain-Based

Performance Impact of Split Tunneling

Speed Benefits

頻寬效益

Split tunneling 可減少 VPN 伺服器負載：

• 本地影音串流：直接連線（節省 VPN 頻寬）
• 本地下載：直接連線（節省 VPN 頻寬）
• 國際瀏覽：VPN（受保護）

常見問題

我可以只針對特定應用程式路由，而不只是地區嗎？

可以，Android 上可以。FreeGuard 的「應用程式代理篩選」免費提供：開啟「網路設定」，點選「應用程式代理篩選」，選擇「僅限所選應用程式」或「略過所選應用程式」，選取應用程式後點選「儲存設定」。變更會在下次連線時生效。iPhone、iPad 和桌面版應用程式無法選擇個別應用程式。

Split tunneling 在行動裝置上可用嗎？

可以，在 Android 上可以：按應用程式設定代理是免費功能，讓你選擇哪些應用程式使用 VPN。在 iPhone 和 iPad 上，連線期間所有應用程式都會使用 FreeGuard，因為 Apple 不允許這類 VPN 選擇個別應用程式。GeoIP 區域路由功能可在 freeguardvpn.com 提供的 Windows 和 Mac 應用程式，以及 Linux 命令列用戶端中使用。

Split tunneling 會造成什麼問題嗎？

很少。大多數問題是：

• 明確需要 VPN 的服務（已在使用 VPN bypass）
• 具有多重地區檢查的服務

Split tunneling 的安全性較低嗎？

對於直接流量，是的——它未加密。這是為了相容性的取捨。請將敏感流量保持在 VPN 上。

我的 ISP 能看到我的 split-tunneled 流量嗎？

可以。直接流量會正常經過您的 ISP。他們可以看到您正在存取那些服務（但若是 HTTPS，則看不到內容）。

Split tunneling 會耗用更多電池嗎？

會稍微增加。路由決策流程只會帶來極小的額外負載。整體影響可忽略不計。

下一步

• 下載 FreeGuard 以試用 split tunneling
• 查看價格方案 取得完整功能
• GeoIP Routing Explained 了解技術細節
• Regional Bypass Scenarios 查看實際範例
• Protocol Selection Guide 與協定搭配使用

最後更新：2026 年 1 月