NekoRay split tunneling

To configure the operation of websites or applications with BlancVPN on a Windows system, it is necessary to set up routing rules in the NekoRay client.

The application has two modes of operation. By a whitelist and a blacklist. The whitelist is a list of sites and applications that use the VPN connection, while all other traffic bypasses it. The blacklist, accordingly, configures the sites and applications that will not use the VPN connection.

Routing table

NekoRay routing is conducted in the section "Settings" → "Route Configuration" → "Basic Routes".

The table specifies the rules for domains and IP addresses.

Columns

Direct - sites bypass the VPN,

Proxy - all sites are accessed using VPN,

Block - sites do not open.

String Domain

In the Domain field, enter sites in the format domain:site.com. For example, this basic list of sites that might be useful:

domain:youtu.be 

domain:rutracker.org 

domain:youtube.com 

domain:streamable.com 

domain:ytimg.com 

domain:googlevideo.com 

domain:googleapis.com 

domain:ggpht.com 

domain:chatgpt.com 

domain:chat.openai.com 

domain:instagram.com 

domain:twitter.com 

domain:facebook.com 

domain:x.com 

domain:linkedin.com 

domain:twimg.com 

domain:fbcdn.net

IP string

IP strings include addresses and network segments in geoip format. For example, rules for routing all Russian websites:

geoip:ru 

geoip:private

What is Outbound mode

This is the access policy for all sites not specified in the rules table.

Proxy - all sites are accessed using VPN,

Bypass - sites bypass the VPN,

Block - sites are not accessible.

Custom routes

In the Custom Routes tab, routing rules for websites and applications are specified in JSON format.

Setting up VPN for websites and applications

Configuring websites and applications in proxy mode, everything else connects bypassing VPN

1. In the NekoRay app, press "Settings" → "Route Configuration" → "Basic Routes" → "Custom Routes".

2. Insert the JSON configuration. For example, these are the rules for Discord and popular browsers:

{
    "rules": [
        {
            "outbound": "proxy",
            "process_name": [
                "Discord.exe",
                "chrome.exe",
                "firefox.exe",
                "msedge.exe",
                "opera.exe",
                "browser.exe",
                "yandexbrowser.exe",
                "brave.exe",
                "vivaldi.exe",
                "librewolf.exe"
            ]
        }
    ]
}

3. By default, outbound select the bypass mode

4. Accept the changes by clicking OK

5. Activate TUN Mode and connect to the desired location.

If necessary, add the routing rules for websites or network segments to the table.

Excluding sites and applications from the VPN operation

Setting up websites and applications in direct mode, everything else connects to VPN

1. In the NekoRay app, press "Settings" → "Route Configuration" → "Basic Routes" → "Custom Routes".

2. Insert the JSON configuration. For example, these are the rules for popular gaming services and games:

{"rules":[{"outbound":"direct","process_name":["VALORANT.exe","VALORANT-Win64-Shipping.exe",
"csgo.exe","cs2.exe","dota2.exe","FortniteClient-Win64-Shipping.exe","ModernWarfare.exe",
"LeagueClient.exe","Wow.exe","r5apex.exe","TslGame.exe","GenshinImpact.exe","javaw.exe",
"Overwatch.exe","RocketLeague.exe","RobloxPlayerBeta.exe","EscapeFromTarkov.exe","bf2042.exe",
"eso64.exe","Destiny2.exe","FallGuys_client_game.exe","starwarsbattlefrontii.exe","ffxiv.exe",
"Cyberpunk2077.exe","RDR2.exe","Phasmophobia.exe","DeadByDaylight.exe","SeaOfThieves.exe",
"RainbowSix.exe","LostArk.exe","aces.exe","ShooterGame.exe","steamwebhelper.exe",
"steamservice.exe","steam.exe"]}]}

3. By default, outbound - select the proxy mode

4. Accept the changes by clicking OK

5. Activate TUN Mode and connect to the desired location.

If necessary, add rules for routing websites or network segments to the table.

FAQ

How to find the process name for rules

Go to the application properties. In the General tab, the application name and file type will be listed. The name of the object is also indicated in the shortcut properties.

How to exclude torrent traffic from the VPN's operation

To speed up the performance of torrent applications

1. In the NekoRay app, press "Settings" → "Route Configuration" → "Basic Routes" → "Custom Routes".

2. For example, for these rules to route all applications but bypass torrent traffic, TeamViewer, Telegram, War Thunder, CS2 and World of Tanks:

{"rules":[{"process_name":["TeamViewer.exe","Telegram.exe","WarThunder.exe","cs2.exe","wot.exe"],"outbound":"direct"},{"protocol":["bittorrent"],"outbound":"direct"},{"port":[6969,6881,6882,6883,6884,6885,6886,6887,6888,6889],"outbound":"direct"},{"domain_suffix":"","outbound":"proxy"}]}

3. By default, outbound select the proxy mode

4. Accept the changes by clicking OK

5. Activate TUN Mode and connect to the desired location.

If necessary, enter the routing rules for websites or network segments into the table.

How to exclude USA traffic from VPN operation

To have USA websites open without a VPN

1. In the NekoRay app, press "Settings" → "Route Configuration" → "Basic Routes" → "Custom Routes".

2. Insert the JSON configuration. For example, these are the rules for routing all Russian traffic directly bypassing the VPN

{"rules":[{"domain_suffix":[".ru"],"outbound":"direct"},{"outbound":"proxy"}]}

3. Enter these rules in the routing table

IP directly:

geoip:com
geoip:us
geoip:private

Direct domain:

geosite:com
geosite:us

4. By default, outbound select the proxy mode

5. Accept the changes by clicking OK

6. Activate TUN Mode and connect to the desired location.

There are no suitable rules for me

If you need help setting up specific rules for your purposes, please write to our support service. We will be happy to do everything we can to assist you!