M
MegaV
M
MegaV
Download
Split tunneling

Choose which apps use the VPN

Route banking around the tunnel so fraud checks see your real IP. Send streaming through a foreign server to unlock the full catalog. Keep games on native ping. One app — three routing decisions, down to the domain.

Get MegaV VPN
MegaV split tunneling — choose which apps use the VPN
Per-app
Routing scope
0 ms
Latency cost when excluded
Unlimited
Active profiles
5
Platforms supported

Three problems, one routing engine

The same feature that unlocks Netflix keeps your bank from flagging your login.

Bypass VPN

Banking sees your real IP

Fraud-detection engines flag foreign IPs — suddenly you're locked out of your own account in a hotel abroad. Add your banking app to the bypass list: it connects locally, MegaV stays on for everything else.

Through VPN

Full streaming catalog

Netflix, Prime Video and Disney+ show different titles per country. Route Netflix through a US or UK server while your browser stays on your home IP — no captchas, no re-logins on sites that trust you.

Bypass VPN

Native ping in ranked

VPN adds hops. For ranked matches, add Valorant, CS2 or your console DNS to the bypass list — the tunnel stays up for chat, browser and downloads, the game hits the native server.

Six ways to split the tunnel

Per-app is table stakes. This is what actually controls traffic.

Per-app rules

Include or exclude any installed app. Drag to reorder priority, group by profile.

Per-domain rules

Route *.netflix.com through VPN, netflix.com/login direct — finer than app-level can reach.

IP allow/deny lists

Whitelist your office CIDR, block specific subnets from ever leaking outside the tunnel.

Reverse split

VPN on by default, a short exclude list for trusted apps. The safer starting posture.

Profile presets

Save Work, Travel and Gaming rule sets. Switch the entire routing table with one tap.

Quick toggle

A tile in the notification shade and a menubar dropdown flip any app in or out instantly.

MegaV vs other VPNs

Most VPNs call an app checkbox "split tunneling". This is what real routing control looks like.

FeatureMegaVOther VPNs
Per-app routingFullPartial
Per-domain routingYesNo
Reverse mode (bypass list)YesPartial
Mobile supportAndroid + iOSAndroid only
DNS routing per ruleYesNo
Saved profilesUnlimitedOne global rule

Every platform, with the right caveats

iOS limits what any VPN can do. Routers unlock what phones can't.

Android
Full per-app + per-domain

Native VpnService API with custom routing table. Quick-tile toggle in the notification shade.

Windows
Full per-app + per-domain

WFP callout driver intercepts at the kernel level. Rules survive reboot and network changes.

macOS
Full per-app + per-domain + firewall

NetworkExtension with PF rules. Blocks leakage even during reconnect.

iOS
Per-app (Apple-limited)

Managed apps only under Apple's VPN framework. Domain routing via on-device rule engine.

Router / OpenWrt
All traffic, rule-based

Install on your router and split by device, CIDR or domain. Console and TV covered automatically.

Split tunneling questions, answered

The details that matter when you're actually configuring rules.

What is split tunneling, exactly?
Split tunneling is a VPN feature that lets some of your traffic go through the encrypted VPN tunnel while the rest uses your normal internet connection. You pick the rules: which apps, which domains, which IP ranges go which way.
When should I use split tunneling vs full VPN?
Full VPN is the safer default — everything encrypted, one consistent IP. Split tunneling earns its place when you have a specific app that misbehaves on VPN (your bank, a streaming service tied to your home region, or a game where every ms counts) or when you want the VPN to be transparent to local devices like printers and NAS.
Does iOS support split tunneling?
Partially. Apple restricts VPN apps to Apple's NetworkExtension framework, which only exposes per-app rules for apps the user has explicitly configured and on-device domain-level routing. You cannot hook arbitrary system-level traffic the way Android, Windows and macOS allow. MegaV pushes this as far as Apple's rules let us.
Can I split by domain instead of by app?
Yes. MegaV's rule engine lets you route specific domains — *.netflix.com, *.github.com — independently of the app that requested them. This matters because modern apps load content from dozens of domains, and "app-level" is often too blunt.
What is reverse split tunneling?
The inverse setup: VPN is on by default for every app, and you maintain a short exclude list of apps or domains that should bypass the tunnel. It's the safer starting posture — you can't forget to protect something, you can only choose to opt specific things out.
Does split tunneling leak my IP?
Apps and domains on your bypass list are supposed to see your real IP — that's the whole point for banking and local services. What matters is DNS: MegaV forces per-rule DNS routing so your bypass traffic doesn't accidentally leak queries through the VPN's resolver, and your VPN traffic never resolves through your ISP. We also ship a kill switch that drops bypassed apps if the rule engine fails.
How do I configure split tunneling in MegaV?
Open Settings → Routing → Split tunneling. Pick a mode (Include only / Exclude / Reverse), tap the + button to add apps or paste domains and CIDRs, and save as a profile. Switch between Work, Travel and Gaming profiles from the main screen or via a quick-tile on Android.
3-day free trial

Route traffic your way

Split tunneling is built into MegaV VPN on Android, iOS, Windows, macOS and router firmware — one subscription, the same rule engine everywhere. Start the free trial and configure your first profile in under two minutes.

Download MegaV VPNSee pricing