How to split tunnel on the Wireguard Client?

kaisernatron

I'm on Windows 11, using the Wireguard Client for the first time (already imported configs and set up the tunnel).

I want to ensure that a specific browser's connections do not pass through the tunnel, while the rest of the machine's connections will be routed through the tunnel.

I don't know anything about ports but I did read that 0.0.0.0/0, ::/0 is quite important? It is the allowed IP for this tunnel

kaisernatron

https://youtu.be/YCfcs0mVnQA?t=112

It says here that when setting the Allowed IP to an internal network (home machine?), Wireguard sends everything destined for that internal network through the tunnel while the rest of the traffic on that machine would be sent to the public internet.

But I want all traffic to pass through the VPN except for one browser, it doesn't matter whether it's to a home machine or not

Oggyo

0.0.0.0/0, ::/0 is for full VPN mode, it means to send all IPv4 and IPv6 traffic via the tunnel.
If you put there, for example 192.168.1.0/24(assuming this is the IP schema of your home network), then it will act in a split mode. Which means only packets designated to reach your home network (192.168.1.0/24) will be routed via the tunnel.

The (official) WireGuard client can be set to split or full mode based on the routing, not based on the applications what looks like you are looking for.

Sorry, I can't suggest a solution for your use case.

kaisernatron

Oggyo

I tried to add a line as suggested on another site: ExcludedApplications = packagename1 but it failed. Invalid key for [Interface] Section: excludedapplications

Apparently there's a program that allows you to bind an app to a the local IP address with this command
Run C:\path\to\wherever\ForceBindIP.exe <private ip> C:\my\game.exe.

I should just switch back to the original client