How to implement split tunneling on router GT-AXE11000 with asuswrt merlin firmware with ~9300 rules?

[jagga99]

Guys, I'm trying to resolve issue with my ISP, around 9300 routing rules should be implemented in order to get pure internet without any blocks.
As I understood - this thing is being called "split tunneling" and router could do this by routing requests to ~9300 ipset subnetworks to external OpenVPN server.

How to do this by using asuswrt firmware? thanks a lot.
PS: Best wishes to RMerlin, greate job and all community.

 

[jagga99]

199 rules for VPNDirector is not enough in my case as you understood.

 

[sfx2000]

Guys, I'm trying to resolve issue with my ISP, around 9300 routing rules should be implemented in order to get pure internet without any blocks.

First question I would have - who is your ISP?

9300 rules - I don't think anyone has ever done that one - I could be wrong, but imagine that each and every traffic flow has to be reviewed to see if there is a match or not...

 

[sfx2000]

Anyways - using netfilter to do this with firewall rules and ipset is not the right way to approach the problem if one wants to split tunnel.

I would build a route specifically for the VPN tunnel, and not have that as the default route - then one can be clever moving from there.

Getting Split-Tunneling in Linux to work

In general when you are connected to virtual private network of your office without split tunneling, all the data...

web.piyushgarg.in

enjoy

 

[SomeWhereOverTheRainBow]

Anyways - using netfilter to do this with firewall rules and ipset is not the right way to approach the problem if one wants to split tunnel.

I would build a route specifically for the VPN tunnel, and not have that as the default route - then one can be clever moving from there.

Getting Split-Tunneling in Linux to work

In general when you are connected to virtual private network of your office without split tunneling, all the data...

web.piyushgarg.in

enjoy

You just earned the best split tunnel answer of the year award!

Seriously, thanks for sharing.