Split tunneling

Hi all,

I am new to mikrotik. Have configured PureVPN according to their guide. (https://support.purevpn.com/mikrotik-configuration)

Also have configured that devices with a IP 192.168.0.200 and above to be outside the VPN pool. I have noticed that there is a huge slow down in speed, especialy Youtube etc. So I was looking online how to set up a split tunnel so the traffic going to Youtube passes directly (not going throw PureVPN). Not sure if I was clear or not, but I dont have much experiance with networking or Mikrotik.

Is there any way to do it?

Thanks in advance!

Hi Khavale,

Welcome on the forum!

I am sure it is possible to use split-tunneling for YouTube traffic. But you’ll need to find out the IP-address being used by YouTube, it might be easier to access the sites you want to access by VPN by additional routes.

Also please share you config, so we can have a look at it and work trough it to give you better advice

Hi, how can I share the configuration?

I have added !youtube.com at this Mangle roule dst. address. Not sure 100% if this would work.
mangleyoutube.JPG

[quote=PureVPNSupport post_id=717412 time=1551165880 user_id=139170]
Hi there,



Please be advised that PureVPN does not support split tunneling on routers.

And for the slow speed, kindly update your network DNS to 208.67.222.222 and 208.67.220.220 in WAN settings and try again.
[/quote]

Hi, I have set those DNS. What I’m truing to configure is that Youtube(or specific website) does not get throw VPN connection via Mikrotik configuration.

[quote=PureVPNSupport post_id=717412 time=1551165880 user_id=139170]
Hi there,



Please be advised that PureVPN does not support split tunneling on routers.
[/quote]

Pure VPN does not need to support it. It has no control over client’s routes and it is only up to client itself, which routes will be forwarded via VPN interface and which one will go straight through usual WAN.

[quote=khavale]
I have added !youtube.com at this Mangle roule dst. address
[/quote]
That won’t work like that. You can’t use domain name in dst-address. However, you can use it to create address-list (which will in return create dynamic list of all resolved IP addressed for particular domain) and then use this address list in mangle rule. That would work fine with many websites, however not with youtube. Youtube uses dynamic domains for serving videos, for example:

r4---sn-uxanug5-hxa6.googlevideo.com

the subdomain randomly changes and therefore you would need to resolve all subdomains matching *.googlevideo.com which is impossible (you can’t resolve ambiguous/wildcard domain)

[quote=vecernik87 post_id=717486 time=1551183523 user_id=109674]
[quote=PureVPNSupport post_id=717412 time=1551165880 user_id=139170]
Hi there,



Please be advised that PureVPN does not support split tunneling on routers.
[/quote]

Pure VPN does not need to support it. It has no control over client’s routes and it is only up to client itself, which routes will be forwarded via VPN interface and which one will go straight through usual WAN.

[quote=khavale]
I have added !youtube.com at this Mangle roule dst. address
[/quote]
That won’t work like that. You can’t use domain name in dst-address. However, you can use it to create address-list (which will in return create dynamic list of all resolved IP addressed for particular domain) and then use this address list in mangle rule. That would work fine with many websites, however not with youtube. Youtube uses dynamic domains for serving videos, for example:

r4---sn-uxanug5-hxa6.googlevideo.com

the subdomain randomly changes and therefore you would need to resolve all subdomains matching *.googlevideo.com which is impossible (you can’t resolve ambiguous/wildcard domain)
[/quote]


Thanks for clearing some things out.

As for the address list, I see only 1 IP for list. Do I have to create individual address lists for different websites?

You can add any amount of domains/addresses to the same list. They just need to be specified as separate entries.
As long as the “name” property (name of the list) is same, all these entries will be linked to the same list name.