[GH-ISSUE #2441] macOS: Site-based split tunneling is enabled but traffic still goes through full tunnel (AmneziaWG) #1089

New issue

Open

opened 2026-10-13 20:34:00 +00:00 by bsakaguchi · 3 comments

bsakaguchi commented

2026-10-13 20:34:00 +00:00

Owner

Originally created by @iospro on GitHub (Apr 4, 2026).
Original GitHub issue: https://github.com/amnezia-vpn/amnezia-client/issues/2441

Hello team,

I’m using the latest AmneziaVPN macOS build from the official website.

Environment

App: AmneziaVPN 4.8.14 (5)
OS: macOS 26.3 (25D125)
Protocol: AmneziaWG
Server: self-hosted (Ubuntu on VPS)
VPN connection itself works (sites open via VPN)

Problem

Site-based split tunneling is set to Enabled with mode:
Only the sites listed here will be accessed through the VPN.

I imported a custom ip-list.json and enabled split tunneling while disconnected, then reconnected.

However, split tunneling does not seem to apply:

curl -4 https://ifconfig.me returns VPS IP (full tunnel), not local ISP IP
non-listed sites also go through VPN

So UI shows split enabled, but runtime behavior is still full tunnel.

What I already tried

Disconnect -> change split settings -> reconnect
Re-import list (Replace site list)
Restart app / reboot macOS
Confirmed active protocol is AmneziaWG and connection is stable

Could you confirm if this is a known limitation/bug for AmneziaWG on macOS, and whether there is a workaround?

Thanks.

Originally created by @iospro on GitHub (Apr 4, 2026). Original GitHub issue: https://github.com/amnezia-vpn/amnezia-client/issues/2441 Hello team, I’m using the latest AmneziaVPN macOS build from the official website. ## Environment - App: AmneziaVPN `4.8.14 (5)` - OS: macOS `26.3 (25D125)` - Protocol: `AmneziaWG` - Server: self-hosted (Ubuntu on VPS) - VPN connection itself works (sites open via VPN) ## Problem `Site-based split tunneling` is set to **Enabled** with mode: `Only the sites listed here will be accessed through the VPN`. I imported a custom `ip-list.json` and enabled split tunneling while disconnected, then reconnected. However, split tunneling does not seem to apply: - `curl -4 https://ifconfig.me` returns VPS IP (full tunnel), not local ISP IP - non-listed sites also go through VPN So UI shows split enabled, but runtime behavior is still full tunnel. ## What I already tried - Disconnect -> change split settings -> reconnect - Re-import list (`Replace site list`) - Restart app / reboot macOS - Confirmed active protocol is AmneziaWG and connection is stable Could you confirm if this is a known limitation/bug for AmneziaWG on macOS, and whether there is a workaround? Thanks.

bsakaguchi commented

2026-10-13 20:34:01 +00:00

Author

Owner

@Laestry commented on GitHub (May 24, 2026):

same for me, works fine on windows and android. Version 4.8.15.4
using amnezia premium

@Laestry commented on GitHub (May 24, 2026): same for me, works fine on windows and android. Version 4.8.15.4 using amnezia premium

bsakaguchi commented

2026-10-13 20:34:01 +00:00

Author

Owner

@arsenkhad commented on GitHub (Jun 9, 2026):

Inverse mode also fails, but only with domains. If you add a list of ip addresses it'll work just fine

@arsenkhad commented on GitHub (Jun 9, 2026): Inverse mode also fails, but only with domains. If you add a list of ip addresses it'll work just fine

bsakaguchi commented

2026-10-13 20:34:01 +00:00

Author

Owner

@marinat commented on GitHub (Aug 18, 2026):

I think you use wrong format for import ip addresses, i used like this:
[ { "hostname": "1.1.1.1/32", "ip": "" }, { "hostname": "1.192.0.0/10", "ip": "" }, { "hostname": "1.37.0.0/16", "ip": "" },
from https://iplist.opencck.org/, in amnezia version 4.8.21 and mode 'Only the sites listed here will be accessed through the VPN.' all works fine. With list without subnets I had same issue

@marinat commented on GitHub (Aug 18, 2026): I think you use wrong format for import ip addresses, i used like this: `[ { "hostname": "1.1.1.1/32", "ip": "" }, { "hostname": "1.192.0.0/10", "ip": "" }, { "hostname": "1.37.0.0/16", "ip": "" },` from https://iplist.opencck.org/, in amnezia version 4.8.21 and mode 'Only the sites listed here will be accessed through the VPN.' all works fine. With list without subnets I had same issue

bsakaguchi referenced this issue

2026-10-13 20:42:31 +00:00

[GH-ISSUE #3107] amn0 interface assigned /32 prefix instead of correct CIDR — no traffic passes (fix in PR #2840 not in 5.0.1.5) #1440