NekoRay split tunneling

To configure the operation of websites or applications with BlancVPN on a Windows system, set up routing rules in the NekoRay client.

The application has two modes of operationЖ using a whitelist or a blacklist. The whitelist is a list of sites and applications that use the VPN connection, while all other traffic bypasses it. The blacklist, accordingly, configures the sites and applications that will not use the VPN connection.

Routing table

NekoRay routing is configured in the section Settings → Route Configuration → Basic Routes.

The table specifies the rules for domains and IP addresses.

Columns

Direct — sites bypass the VPN

Proxy — all sites are accessed using VPN

Block — sites do not open

String Domain

In the Domain field, enter sites in the format domain:site.com. For example, this basic list of sites might be useful:

domain:youtu.be 

domain:rutracker.org 

domain:youtube.com 

domain:streamable.com 

domain:ytimg.com 

domain:googlevideo.com 

domain:googleapis.com 

domain:ggpht.com 

domain:chatgpt.com 

domain:chat.openai.com 

domain:instagram.com 

domain:twitter.com 

domain:facebook.com 

domain:x.com 

domain:linkedin.com 

domain:twimg.com 

domain:fbcdn.net

IP string

IP strings include addresses and network segments in geoip format. For example, these are the rules for routing all Russian websites:

geoip:ru 

geoip:private

What is Outbound mode

This is the access policy for all sites not specified in the rules table.

Proxy — all sites are accessed using VPN

Bypass — sites bypass the VPN

Block — sites do not open.

Custom routes

In the Custom Routes tab, routing rules for websites and applications are specified in JSON format.

Setting up VPN for websites and applications

Configure websites and applications in proxy mode, everything else bypasses VPN.

In the NekoRay app, press Settings → Route Configuration → Basic Routes → Custom Routes.

Insert the JSON configuration. For example, these are the rules for Discord and popular browsers:

{
    "rules": [
        {
            "outbound": "proxy",
            "process_name": [
                "Discord.exe",
                "chrome.exe",
                "firefox.exe",
                "msedge.exe",
                "opera.exe",
                "browser.exe",
                "yandexbrowser.exe",
                "brave.exe",
                "vivaldi.exe",
                "librewolf.exe"
            ]
        }
    ]
}

For the default outbound mode select the bypass mode.
Confirm the changes by clicking OK.
Activate TUN Mode and connect to the desired location.

If necessary, add the routing rules for websites or network segments to the table.

Excluding sites and applications from the VPN operation

Configure websites and applications in direct mode, everything else connects to VPN.

In the NekoRay app, press Settings → Route Configuration → Basic Routes → Custom Routes.

Insert the JSON configuration. For example, these are the rules for popular gaming services and games:

{"rules":[{"outbound":"direct","process_name":["VALORANT.exe","VALORANT-Win64-Shipping.exe",
"csgo.exe","cs2.exe","dota2.exe","FortniteClient-Win64-Shipping.exe","ModernWarfare.exe",
"LeagueClient.exe","Wow.exe","r5apex.exe","TslGame.exe","GenshinImpact.exe","javaw.exe",
"Overwatch.exe","RocketLeague.exe","RobloxPlayerBeta.exe","EscapeFromTarkov.exe","bf2042.exe",
"eso64.exe","Destiny2.exe","FallGuys_client_game.exe","starwarsbattlefrontii.exe","ffxiv.exe",
"Cyberpunk2077.exe","RDR2.exe","Phasmophobia.exe","DeadByDaylight.exe","SeaOfThieves.exe",
"RainbowSix.exe","LostArk.exe","aces.exe","ShooterGame.exe","steamwebhelper.exe",
"steamservice.exe","steam.exe"]}]}

For the default outbound mode, select the proxy mode.
Confirm the changes by clicking OK.
Activate TUN Mode and connect to the desired location.

If necessary, add rules for routing websites or network segments to the table.

FAQ

How do I find the process name for rules

Go to the application properties. In the General tab, the application name and file type will be listed. The name of the object is also indicated in the shortcut properties.

How do I exclude torrent traffic from the VPN

To speed up torrent applications

In the NekoRay app, press Settings → Route Configuration → Basic Routes → Custom Routes.

For example, these are the rules to route all applications but bypass torrent traffic, TeamViewer, Telegram, War Thunder, CS2 and World of Tanks:

{"rules":[{"process_name":["TeamViewer.exe","Telegram.exe","WarThunder.exe","cs2.exe","wot.exe"],"outbound":"direct"},{"protocol":["bittorrent"],"outbound":"direct"},{"port":[6969,6881,6882,6883,6884,6885,6886,6887,6888,6889],"outbound":"direct"},{"domain_suffix":"","outbound":"proxy"}]}

For the default outbound mode select the proxy mode.
Confirm the changes by clicking OK.
Activate TUN Mode and connect to the desired location.

If necessary, enter the routing rules for websites or network segments into the table.

How do I exclude USA traffic from VPN operation

To make USA websites open without a VPN:

In the NekoRay app, press Settings → Route Configuration → Basic Routes → Custom Routes.
Insert the JSON configuration. For example, these are the rules for routing all Russian traffic directly bypassing the VPN:
```
{"rules":[{"domain_suffix":[".ru"],"outbound":"direct"},{"outbound":"proxy"}]}
```
Enter these rules in the routing table:
Direct IP:
```
geoip:com
geoip:us
geoip:private
```
Direct domain:
```
geosite:com
geosite:us
```
For the default outbound mode, select the proxy mode.
Accept the changes by clicking OK.
Activate TUN Mode and connect to the desired location.

There are no suitable rules for me

If you need help setting up specific rules for your purposes, please contact our support team. We're here to help!