GLOSSARY
Split tunneling
Split tunneling lets you decide which apps, sites or destinations go through the VPN tunnel and which use your normal internet connection. It can include only chosen traffic in the tunnel, or exclude chosen traffic from it.
Why it matters
It gives you speed and compatibility: a banking app may refuse VPN traffic, or a game may need a low-latency path, while the rest of your browsing stays protected. The price is exposure. Excluded apps show your real address, and their DNS lookups can go to your provider, which can look like a leak even though you configured it.
In practice
Review the list whenever you test. If you see your real address or provider's DNS in a leak test, split tunneling is a common reason. Switch it off, run the tests again, then add exclusions back one at a time. Some VPN apps split by app, others by address range, and the two work differently.
Related terms
- VPN: A VPN creates an encrypted tunnel between your device and a server operated by the VPN service.
- Kill switch: A kill switch is a VPN feature that blocks your internet access whenever the VPN connection drops, so that no traffic is sent over your normal, unprotected connection.
- DNS leak: A DNS leak is when your device sends its DNS lookups to a resolver you did not intend, usually your internet provider's, while you believe a VPN or proxy is handling your traffic.
- Proxy: A proxy server is an intermediary that makes requests on your behalf.