[GH-ISSUE #996] Split Tunneling does not work on Windows #318

Open
opened 2026-10-13 20:18:46 +00:00 by bsakaguchi · 9 comments
Owner

Originally created by @denmorgenshtern on GitHub (Aug 22, 2024).
Original GitHub issue: https://github.com/amnezia-vpn/amnezia-client/issues/996

Split Tunneling does not work on the Windows client. For websites and for applications both. The client "successfully" connects for the first time, but nothing works, like no internet at all. Reconnection does not occur at all, the "Connect" button does not seem to respond. Restarting the service helps.

If you disable Split Tunneling, everything works fine.
Also for macOS / iOS / Android apps Split Tunneling works great, guess only Windows problem.

Originally created by @denmorgenshtern on GitHub (Aug 22, 2024). Original GitHub issue: https://github.com/amnezia-vpn/amnezia-client/issues/996 Split Tunneling does not work on the Windows client. For websites and for applications both. The client "successfully" connects for the first time, but nothing works, like no internet at all. Reconnection does not occur at all, the "Connect" button does not seem to respond. Restarting the service helps. If you disable Split Tunneling, everything works fine. Also for macOS / iOS / Android apps Split Tunneling works great, guess only Windows problem.
Author
Owner

@dayfuaim commented on GitHub (Aug 26, 2024):

macOS 14.6 too.
AmneziaWg v4.7.0.0

UPDATE: macOS 10.15.7 too (AmnWg 4.6.0.3)

<!-- gh-comment-id:2311034793 --> @dayfuaim commented on GitHub (Aug 26, 2024): macOS 14.6 too. AmneziaWg v4.7.0.0 UPDATE: macOS 10.15.7 too (AmnWg 4.6.0.3)
Author
Owner

@denmorgenshtern commented on GitHub (Aug 27, 2024):

UPD: a few details of the problem

"Site-based split tunneling" is probably actually "IP-based split tunneling". When adding a domain, the IP address is incorrect! Moreover, sometimes one IP is resolved to different domains (see screenshot)! If you manually add the correct domain IP, sometimes it works, sometimes it doesn't. Restarting the service sometimes helps. Restarting the computer sometimes helps.
Снимок экрана 2024-08-27 101012

If you select "App-based split tunneling", the selected applications do not have Internet at all. Not selected apps - works through VPN as intended.

<!-- gh-comment-id:2311785727 --> @denmorgenshtern commented on GitHub (Aug 27, 2024): UPD: a few details of the problem "Site-based split tunneling" is probably actually "IP-based split tunneling". When adding a domain, the IP address is incorrect! Moreover, sometimes one IP is resolved to different domains (see screenshot)! If you manually add the correct domain IP, sometimes it works, sometimes it doesn't. Restarting the service sometimes helps. Restarting the computer sometimes helps. ![Снимок экрана 2024-08-27 101012](https://github.com/user-attachments/assets/646bbaf8-c363-4c35-aa92-a0b4348d0d0b) If you select "App-based split tunneling", the selected applications do not have Internet at all. Not selected apps - works through VPN as intended.
Author
Owner

@nexterot commented on GitHub (Jan 5, 2025):

If you select "App-based split tunneling", the selected applications do not have Internet at all. Not selected apps - works through VPN as intended.

same problem

<!-- gh-comment-id:2571656938 --> @nexterot commented on GitHub (Jan 5, 2025): > If you select "App-based split tunneling", the selected applications do not have Internet at all. Not selected apps - works through VPN as intended. same problem
Author
Owner

@Korb commented on GitHub (Jan 29, 2025):

100% reproducible problem:

  1. Go to "Split tunneling (Allows you to connect to some sites or applications through a VPN connection and bypass others)".
  2. Add chrome.exe, chrome_proxy.exe, doublecmd.exe, explorer.exe, Far.exe, GoogleChromePortable.exe, qbittorrent.exe, SASPlanet.Debug.exe, SASPlanet.exe, and Telegram.exe.
  3. Enable "App-based split tunneling" ("App split tunneling (Apps from the list should not have access via VPN)".
  4. Connect to the VPN Generator administrative shadowsocks profile.
  5. Launch Mozilla Firefox 135.0 (64-bit) and open https://vpn.works in it.

Expected behavior

  1. The site will open and display statistics of added users.

Observed behavior

Hmm. We’re having trouble finding that site.
We can’t connect to the server at vpn.works.
If you entered the right address, you can:
• Try again later
• Check your network connection
• Check that Firefox has permission to access the web (you might be connected but behind a firewall)

or

There is nothing in here.

<!-- gh-comment-id:2621657240 --> @Korb commented on GitHub (Jan 29, 2025): 100% reproducible problem: 1. Go to "Split tunneling (Allows you to connect to some sites or applications through a VPN connection and bypass others)". 2. Add `chrome.exe`, `chrome_proxy.exe`, `doublecmd.exe`, `explorer.exe`, `Far.exe`, `GoogleChromePortable.exe`, `qbittorrent.exe`, `SASPlanet.Debug.exe`, `SASPlanet.exe`, and `Telegram.exe`. 3. Enable "App-based split tunneling" ("App split tunneling (Apps from the list should not have access via VPN)". 4. Connect to the VPN Generator administrative shadowsocks profile. 5. Launch Mozilla Firefox 135.0 (64-bit) and open `https://vpn.works` in it. ### Expected behavior 6. The site will open and display statistics of added users. ### Observed behavior > Hmm. We’re having trouble finding that site. > We can’t connect to the server at vpn.works. > If you entered the right address, you can: > • Try again later > • Check your network connection > • Check that Firefox has permission to access the web (you might be connected but behind a firewall) or > There is nothing in here.
Author
Owner

@ekalkutin commented on GitHub (Mar 7, 2025):

Confirm issue.
@denmorgenshtern @dayfuaim @nexterot please try ping and check you get valid IP address. On mine machine I noticed, when I paste hostname it resolves with another IP address. If I use IP address from ping - amnezia works

Image
<!-- gh-comment-id:2707110748 --> @ekalkutin commented on GitHub (Mar 7, 2025): Confirm issue. @denmorgenshtern @dayfuaim @nexterot please try `ping` and check you get valid IP address. On mine machine I noticed, when I paste hostname it resolves with another IP address. If I use IP address from `ping` - amnezia works <img width="692" alt="Image" src="https://github.com/user-attachments/assets/58729596-ee07-400f-8569-760b054616a6" />
Author
Owner

@Dedsladkoed commented on GitHub (Mar 10, 2025):

Try adding the entire subnet of ip addresses as advised in the documentation https://docs.amnezia.org/documentation/instructions/vpn-split-tunneling/

<!-- gh-comment-id:2709529336 --> @Dedsladkoed commented on GitHub (Mar 10, 2025): Try adding the entire subnet of ip addresses as advised in the documentation https://docs.amnezia.org/documentation/instructions/vpn-split-tunneling/
Author
Owner

@zcfyz commented on GitHub (May 31, 2025):

Same. Selected apps don't have Internet at all

<!-- gh-comment-id:2925229509 --> @zcfyz commented on GitHub (May 31, 2025): Same. Selected apps don't have Internet at all
Author
Owner

@Giftofdawn commented on GitHub (Jan 14, 2026):

Year and a half later still not fixed.

<!-- gh-comment-id:3749108559 --> @Giftofdawn commented on GitHub (Jan 14, 2026): Year and a half later still not fixed.
Author
Owner

@AlexeyKot commented on GitHub (Jan 25, 2026):

I faced the same issue and it turned out I just used the wrong mode:

Image

I switched: "Addresses from the list should not be accessed via VPN" and it worked fine just after.

My use case: I've listed the IP addresses that should be accessed directly without VPN, like my router dashboard, for example.

<!-- gh-comment-id:3796144712 --> @AlexeyKot commented on GitHub (Jan 25, 2026): I faced the same issue and it turned out I just used the wrong mode: <img width="499" height="979" alt="Image" src="https://github.com/user-attachments/assets/dd157c4c-a04f-406d-a6de-bbd8fc802c48" /> I switched: "Addresses from the list should not be accessed via VPN" and it worked fine just after. My use case: I've listed the IP addresses that should be accessed directly without VPN, like my router dashboard, for example.
Sign in to join this conversation.
No labels
pull-request
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
amnezia-vpn/amnezia-client#318
No description provided.