Thursday, March 2, 2023

Use Split-Tunnel with WireGaurd VPN

There are several benefits of using Split-Tunnel with WireGuard VPN. However, the best aspects are its provision of Flexibility and Control Over Traffic Routing and Improved Security for What Matters Most.

We often use a VPN to access private resources but we do not want all of the traffic to traverse through the VPN. A simple example is our Internet browsing.

Split-Tunneling defines which traffic will go via the VPN and which will not. Those that are not allowed in the VPN will use regular connectivity.

To configure Split-Tunneling in Windows or elsewhere, you need to do the following:

[Peer]

PublicKey = Your Key

PresharedKey = Your Mutual Authentication Key

AllowedIPs = 192.0.2.0/24, 198.51.100.0/24

Endpoint = 10.193.61.189:54330

Edit the [Peer] AllowedIPs. Here, do not use 0.0.0.0/0. Instead, use those destination IP Blocks which will be allowed to use the VPN.

Now, as shown in the example, only destination IP Blocks matching 192.0.2.0/24 and 198.51.100.0/24 will use the VPN, and other destination traffic will use the default or regular connection.

Note: The best thing about using Split-Tunneling with a private VPN is that you will get Internet access in other apps for destinations.

As everything comes with a cost, now using Split-Tunneling will use more processing power of the host machine than previously to define how destination traffic will pass by."

BGP Peer Open-Sent issue in MikroTik and a Solution by BGP monitor

The “Open-Sent” state in BGP (Border Gateway Protocol) indicates that the router has sent an OPEN message and is waiting for an OPEN message...