Split Tunneling: Proton and Nord Update Windows Clients for App-Level Control
The two providers allow users to keep specific applications outside the encrypted tunnel to reduce latency and access local devices.
By Harper Hassan ·
Proton and Nord have enabled split tunneling features in their Windows applications, allowing users to route specific software around the VPN encryption. This update gives consumers direct control over which data packets travel through the secure tunnel and which connect to the internet directly. The change addresses a common trade-off in virtual private network usage, where protection often comes with a reduction in speed.
The feature is designed to mitigate performance issues in specific scenarios. Gamers can exclude their titles from the VPN to maintain the fastest possible connection. Users checking local movie showtimes or using weather applications can bypass the tunnel to ensure their location is not masked. Additionally, the setting allows direct connections to home network devices like printers and smart home gadgets that might otherwise be inaccessible through a VPN.
The mechanism works by creating an encrypted bridge for data moving to and from the web. This bridge prevents internet providers, law enforcement agencies, and other users on the same Wi-Fi network from viewing online activity. Split tunneling sends selected traffic around this bridge, eliminating the need for users to manually switch the VPN on and off for different tasks.
In the ProtonVPN for Windows console, a split tunneling link appears on the right side of the interface. Users can enable the feature and choose to include specific apps in the tunnel, excluding everything else, or exclude specific apps while including the rest. NordVPN offers a similar process. Users click the cog icon in the bottom left of the main interface, select Split tunneling, and flip the toggle to choose which apps receive protection.
Other forms of split tunneling exist, including URL-based rules that apply to specific domains and route-based controls that rely on IP addresses. These methods are less common in consumer software and are typically used by administrators managing multiple users. Mobile devices also support the feature, though iPhones offer less flexibility than Android devices and desktop platforms. On iPhones, users are generally limited to excluding websites and IP addresses rather than selecting specific applications.
The setup process is a one-time task for most users. While settings can be revisited and changed, the feature does not require ongoing attention. The configuration leaves VPN protection active for sensitive tasks and inactive for others, providing a balance between security and performance.
Source: Wired
