linux-app icon indicating copy to clipboard operation
linux-app copied to clipboard

Add split-tunneling functionality

Open raj-magesh opened this issue 4 years ago • 16 comments

Hi ProtonVPN team!

As far as I can tell, there's no configuration options in the current ProtonVPN desktop client for Linux that allow for split-tunneling. I'd like a few applications to use my work VPN, the others to use ProtonVPN, and still have access to my LAN.

I believe similar functionality is available on your Android app. Do you have a roadmap for implementing this feature?

raj-magesh avatar Jul 02 '21 13:07 raj-magesh

I am also curious as to when split tunneling will be implemented for Manjaro/Arch.

asorel1942 avatar Jul 18 '21 14:07 asorel1942

Interested in getting split tunneling working as well. I see the configuration settings in .config/protonvpn, but wasn't able to get it working.

`

"default_protocol": "udp",
"killswitch": 0,
"dns": {
    "dns_status": 1,
    "custom_dns": []
},
"split_tunneling": {
    "split_tunneling_status": 0,
    "ip_list": []
},
"netshield": 2,
"secure_core": 0,
"vpn_accelerator": 1

`

tategriffin avatar Jul 18 '21 16:07 tategriffin

+1 on this

srirambv avatar Aug 23 '21 06:08 srirambv

At least, using ProtonVPN and still having access to the LAN seems to be the default on Linux.

qoheniac avatar Aug 31 '21 15:08 qoheniac

I was hacking around and got this mostly implemented, the only problem is there appears to be some sort of bug in the NM library when importing the profile. I'm getting the following error in nm_plugin.py, line 25 when it attempts to import the profile:

nm-connection-error-quark: configuration error: unsupported 3th argument net_gateway to “route” (line 58) (0)

The profile being imported looks like this:

# Split Tunneling
route <custom_ip> 255.255.255.255 net_gateway

Am I understanding this directive wrong or is there an issue in the library? It works totally fine if I run the profile directly with sudo openvpn --config test.config, including the split tunneling.

Possibly relevant upstream bugs:

  • https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/378
  • https://gitlab.gnome.org/GNOME/NetworkManager-openvpn/-/issues/40

njfox avatar Sep 09 '21 21:09 njfox

+2 for dis ;D

ghost avatar Sep 16 '21 11:09 ghost

Hello 👋

Thank you all for voicing your oppinions. It is planned to add split-tunneling, although currently we have no ETA. Please be sure to subscribe to our official channels on social media, as this will be shared once this feature is made available.

calexandru2018 avatar Sep 16 '21 11:09 calexandru2018

+1 for linux split tunneling at the process / application level

Use case: running a bitcoin full node that accepts incoming connections

myartsev avatar Sep 24 '21 18:09 myartsev

We, linux users, should have access to this kind of functionality even before other OSes, as we are more likely to help and report issues that could concern other OSes. Please help us by letting us help you !

Manumerique avatar Nov 17 '21 13:11 Manumerique

+1 for local LAN access. Needing to disable VPN every time I want to access another PC on the LAN gets very cumbersome.

glyphy avatar Nov 28 '21 23:11 glyphy

I can access other devices on the LAN from Linux while Proton VPN is active and I didn't change any settings

qoheniac avatar Nov 28 '21 23:11 qoheniac

+1 for local LAN access. Needing to disable VPN every time I want to access another PC on the LAN gets very cumbersome.

Lan access is available, I think is the default configuration, I didn't configure anything.

no-longer-fun avatar Dec 03 '21 19:12 no-longer-fun

+1 for local LAN access. Needing to disable VPN every time I want to access another PC on the LAN gets very cumbersome.

Lan access is available, I think is the default configuration, I didn't configure anything.

Lan access is available only for the subnet of your PC (the one running ProtonVPN). Split tunneling should allow multiple subnets to be added to the exception list (or even better, do not route internal subnets to the VPN interface).

gthb93 avatar Dec 21 '21 18:12 gthb93

Subscribed to this issue, hopefully there will soon be some progress in the near future. I like what ProtonVPN has to offer but it is not usable for me until it supports split tunneling on Linux. No need for fancy GUI, CLI version would absolutely suffice.

m5x avatar Feb 24 '22 01:02 m5x

+1 for application level split tunneling

hulloanson avatar May 23 '22 15:05 hulloanson

Really time to implement that!

Fragefix avatar Jan 09 '23 15:01 Fragefix