amnezia-vpn/amnezia-client

Fork 0

mirror of https://github.com/amnezia-vpn/amnezia-client.git synced 2026-10-13 21:33:09 +00:00

[GH-ISSUE #1551] Split tunneling doesnt work on Linux with `AmneziaWG` (`Self-hosted VPN`) #646

New issue

Open

opened 2026-10-13 20:25:49 +00:00 by bsakaguchi · 3 comments

bsakaguchi commented

2026-10-13 20:25:49 +00:00

Owner

Originally created by @hacker-hackman on GitHub (Apr 25, 2025).
Original GitHub issue: https://github.com/amnezia-vpn/amnezia-client/issues/1551

Describe the bug
When using the AmneziaWG protocol on Linux with Self-hosted VPN, the split tunneling feature is not functioning properly:

When I select the option Only the sites listed here will be accessed through the VPN, the VPN doesn't work at all.
When I select Addresses from the list should not be accessed via VPN, the VPN applies to all sites, completely ignoring my excluded sites list.

Steps to Reproduce

Select "Self-hosted VPN" on the welcome screen
Enter your credentials and click "Continue"
After installation completes, go to Settings > Connection > Site-based split tunneling
Select Only the sites listed here will be accessed through the VPN, add several sites to the list, and enable the "Split tunneling" switch
Click "Connect" and open your browser to verify that the VPN doesn't work at all
Repeat steps 3-5 but select Addresses from the list should not be accessed via VPN to verify that the VPN affects every site, including those on your blacklist

Expected behavior

When Only the sites listed here will be accessed through the VPN is selected and split tunneling is enabled: only sites on my list should use the VPN connection
When Addresses from the list should not be accessed via VPN is selected and split tunneling is enabled: all sites except those on my excluded list should use the VPN connection

Desktop (please complete the following information):

OS: Linux Mint 21.3
Amnezia Version: 4.8.5.0

Server (please complete the following information):

OS: Debian 12 (bookworm)

Originally created by @hacker-hackman on GitHub (Apr 25, 2025). Original GitHub issue: https://github.com/amnezia-vpn/amnezia-client/issues/1551 **Describe the bug** When using the `AmneziaWG` protocol on Linux with `Self-hosted VPN`, the split tunneling feature is not functioning properly: - When I select the option `Only the sites listed here will be accessed through the VPN`, the VPN doesn't work at all. - When I select `Addresses from the list should not be accessed via VPN`, the VPN applies to all sites, completely ignoring my excluded sites list. **Steps to Reproduce** 1. Select "Self-hosted VPN" on the welcome screen 2. Enter your credentials and click "Continue" 3. After installation completes, go to Settings > Connection > Site-based split tunneling 4. Select `Only the sites listed here will be accessed through the VPN`, add several sites to the list, and enable the "Split tunneling" switch 5. Click "Connect" and open your browser to verify that the VPN doesn't work at all 6. Repeat steps 3-5 but select `Addresses from the list should not be accessed via VPN` to verify that the VPN affects every site, including those on your blacklist **Expected behavior** - When `Only the sites listed here will be accessed through the VPN` is selected and split tunneling is enabled: only sites on my list should use the VPN connection - When `Addresses from the list should not be accessed via VPN` is selected and split tunneling is enabled: all sites except those on my excluded list should use the VPN connection **Desktop (please complete the following information):** - OS: Linux Mint 21.3 - Amnezia Version: 4.8.5.0 **Server (please complete the following information):** - OS: Debian 12 (bookworm)

bsakaguchi commented

2026-10-13 20:25:51 +00:00

Author

Owner

@jhaoda commented on GitHub (Aug 28, 2025):

Same on 4.8.10.0

@jhaoda commented on GitHub (Aug 28, 2025): Same on 4.8.10.0

bsakaguchi commented

2026-10-13 20:25:52 +00:00

Author

Owner

@volodchenkov commented on GitHub (Apr 13, 2026):

The same on Kubuntu 25.10 with client 4.8.14.5. Server on Ubuntu 22.04.

@volodchenkov commented on GitHub (Apr 13, 2026): The same on Kubuntu 25.10 with client 4.8.14.5. Server on Ubuntu 22.04.

bsakaguchi commented

2026-10-13 20:25:52 +00:00

Author

Owner

@highlander-ekb commented on GitHub (Aug 29, 2026):

I can reproduce this on Kubuntu 24.04 with AmneziaVPN 5.0.1.5 and self-hosted AmneziaWG.

Site split tunneling mode: “Addresses from the list should not be accessed via VPN”.

Added web.max.ru. The new client correctly resolves all current IPv4 addresses:

155.212.204.78
155.212.204.193
155.212.204.143

However, all of them are still routed through the VPN:

$ ip route get 155.212.204.78
155.212.204.78 dev amn0 src 10.8.1.6

$ ip route get 155.212.204.193
155.212.204.193 dev amn0 src 10.8.1.6

$ ip route get 155.212.204.143
155.212.204.143 dev amn0 src 10.8.1.6

ip rule show contains only the default local/main/default rules, and there are no corresponding bypass routes in ip route show table all.

So in 5.0.1.5 the hostname resolution appears improved, but the actual site exclusion is still not applied on Linux.

@highlander-ekb commented on GitHub (Aug 29, 2026): I can reproduce this on Kubuntu 24.04 with AmneziaVPN 5.0.1.5 and self-hosted AmneziaWG. Site split tunneling mode: “Addresses from the list should not be accessed via VPN”. Added web.max.ru. The new client correctly resolves all current IPv4 addresses: 155.212.204.78 155.212.204.193 155.212.204.143 However, all of them are still routed through the VPN: $ ip route get 155.212.204.78 155.212.204.78 dev amn0 src 10.8.1.6 $ ip route get 155.212.204.193 155.212.204.193 dev amn0 src 10.8.1.6 $ ip route get 155.212.204.143 155.212.204.143 dev amn0 src 10.8.1.6 ip rule show contains only the default local/main/default rules, and there are no corresponding bypass routes in ip route show table all. So in 5.0.1.5 the hostname resolution appears improved, but the actual site exclusion is still not applied on Linux.

bsakaguchi referenced this issue

2026-10-13 21:17:29 +00:00

[PR #646] [MERGED] Fix translations #1995

No labels

pull-request

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

amnezia-vpn/amnezia-client#646

No description provided.

Rows
Columns

[GH-ISSUE #1551] Split tunneling doesnt work on Linux with AmneziaWG (Self-hosted VPN) #646

[GH-ISSUE #1551] Split tunneling doesnt work on Linux with `AmneziaWG` (`Self-hosted VPN`) #646