Ручной Split tunneling для VPN

Локальные сети и Интернет
Відповісти
Автор
Повідомлення
Fraunhofer
Member
Аватар користувача

Повідомлення

Есть VPN-клиент для ПК, на котором отсутствует функция Split tunneling.
Существуют ли какие-либо способы вручную пустить траффик определённых програм через этот VPN, а всё остальное чтобы работало как обычно?
terminahtor
Member
Аватар користувача
Звідки: Київ

Повідомлення

Fraunhofer: 01.03.2023 13:37Есть VPN-клиент для ПК, на котором отсутствует функция Split tunneling.
На SMB були обговорення такого сценарію, але умовно простіше це організувати на рівні роутера через консоль, я так робив з L2TP тунелем, типу щоб основний трафік йшов повз тунель, а доступ до "заборонених" ресурсів - через VPN, на основі списку з заборонених префіксів(їх там пару сотня-дві). Написав простенький скрипт на баші по типу if-else.

типу такого
спойлер
/tmp/home/root# cat /jffs/scripts/vpn.sh
#!/bin/sh
ip route del 128.0.0.0/1 via 192.168.12.1 dev ppp5
ip route del 0.0.0.0/1 via 192.168.12.1 dev ppp5
route add -net 192.168.12.0 netmask 255.255.255.0 ppp5
ip route add default dev ppp5 table 1
ip rule add to 5.45.217.0/24 table 1 pref 300
ip rule add to 5.61.16.0/21 table 1 pref 300
ip rule add to 5.61.232.0/21 table 1 pref 300
ip rule add to 5.255.255.0/24 table 1 pref 300
ip rule add to 77.74.178.18/32 table 1 pref 300
ip rule add to 77.88.8.0/24 table 1 pref 300
ip rule add to 77.88.21.0/24 table 1 pref 300
ip rule add to 77.88.55.0/24 table 1 pref 300
ip rule add to 79.137.157.0/24 table 1 pref 300
ip rule add to 79.137.157.0/29 table 1 pref 300
ip rule add to 79.137.157.32/27 table 1 pref 300
ip rule add to 79.137.183.0/24 table 1 pref 300
ip rule add to 87.240.128.0/18 table 1 pref 300
ip rule add to 87.245.164.0/24 table 1 pref 300
ip rule add to 87.250.250.0/24 table 1 pref 300
ip rule add to 87.250.251.0/24 table 1 pref 300
ip rule add to 93.158.134.0/24 table 1 pref 300
ip rule add to 93.186.224.0/20 table 1 pref 300
ip rule add to 94.100.176.0/20 table 1 pref 300
ip rule add to 95.142.192.0/20 table 1 pref 300
ip rule add to 95.142.192.0/21 table 1 pref 300
ip rule add to 95.142.201.0/24 table 1 pref 300
ip rule add to 95.142.202.0/23 table 1 pref 300
ip rule add to 95.142.204.0/23 table 1 pref 300
ip rule add to 95.142.204.0/24 table 1 pref 300
ip rule add to 95.142.206.0/24 table 1 pref 300
ip rule add to 95.163.32.0/19 table 1 pref 300
ip rule add to 95.163.248.0/21 table 1 pref 300
ip rule add to 95.213.0.0/17 table 1 pref 300
ip rule add to 109.235.165.0/24 table 1 pref 300
ip rule add to 128.140.168.0/21 table 1 pref 300
ip rule add to 128.140.170.0/24 table 1 pref 300
ip rule add to 178.22.88.0/21 table 1 pref 300
ip rule add to 178.22.90.0/23 table 1 pref 300
ip rule add to 178.22.92.0/23 table 1 pref 300
ip rule add to 178.237.16.0/20 table 1 pref 300
ip rule add to 178.237.16.0/21 table 1 pref 300
ip rule add to 178.237.24.0/22 table 1 pref 300
ip rule add to 178.237.29.0/24 table 1 pref 300
ip rule add to 178.237.30.0/23 table 1 pref 300
ip rule add to 185.5.136.0/22 table 1 pref 300
ip rule add to 185.6.247.0/24 table 1 pref 300
ip rule add to 185.16.148.0/22 table 1 pref 300
ip rule add to 185.16.244.0/23 table 1 pref 300
ip rule add to 185.16.246.0/23 table 1 pref 300
ip rule add to 185.32.248.0/22 table 1 pref 300
ip rule add to 185.32.248.0/23 table 1 pref 300
ip rule add to 185.32.250.0/23 table 1 pref 300
ip rule add to 185.71.78.0/24 table 1 pref 300
ip rule add to 188.93.56.0/21 table 1 pref 300
ip rule add to 188.93.57.0/24 table 1 pref 300
ip rule add to 188.93.58.0/23 table 1 pref 300
ip rule add to 188.93.60.0/24 table 1 pref 300
ip rule add to 188.93.63.0/24 table 1 pref 300
ip rule add to 194.186.63.0/24 table 1 pref 300
ip rule add to 195.211.20.0/22 table 1 pref 300
ip rule add to 195.211.20.0/24 table 1 pref 300
ip rule add to 195.211.128.0/22 table 1 pref 300
ip rule add to 195.211.128.0/23 table 1 pref 300
ip rule add to 195.211.130.0/23 table 1 pref 300
ip rule add to 195.218.168.0/24 table 1 pref 300
ip rule add to 195.218.190.0/23 table 1 pref 300
ip rule add to 208.87.94.0/23 table 1 pref 300
ip rule add to 213.180.193.0/24 table 1 pref 300
ip rule add to 213.180.204.0/24 table 1 pref 300
ip rule add to 217.20.144.0/20 table 1 pref 300
ip rule add to 217.69.128.0/20 table 1 pref 300
ip rule add to 5.9.2.141/32 table 1 pref 300
ip rule add to 5.45.192.0/18 table 1 pref 300
ip rule add to 5.61.16.0/21 table 1 pref 300
ip rule add to 5.61.232.0/21 table 1 pref 300
ip rule add to 5.135.247.193/32 table 1 pref 300
ip rule add to 5.153.134.34/32 table 1 pref 300
ip rule add to 5.178.80.46/32 table 1 pref 300
ip rule add to 5.187.0.192/32 table 1 pref 300
ip rule add to 5.255.192.0/18 table 1 pref 300
ip rule add to 31.31.196.127/32 table 1 pref 300
ip rule add to 37.9.64.0/18 table 1 pref 300
ip rule add to 37.140.128.0/18 table 1 pref 300
ip rule add to 37.140.192.163/32 table 1 pref 300
ip rule add to 37.140.192.177/32 table 1 pref 300
ip rule add to 51.254.201.70/32 table 1 pref 300
ip rule add to 68.142.68.28/32 table 1 pref 300
ip rule add to 68.142.70.28/32 table 1 pref 300
ip rule add to 77.74.176.0/21 table 1 pref 300
ip rule add to 77.75.152.0/21 table 1 pref 300
ip rule add to 77.88.0.0/18 table 1 pref 300
ip rule add to 77.222.40.252/32 table 1 pref 300
ip rule add to 77.222.56.73/32 table 1 pref 300
ip rule add to 78.155.219.132/32 table 1 pref 300
ip rule add to 79.137.142.0/24 table 1 pref 300
ip rule add to 79.137.157.0/24 table 1 pref 300
ip rule add to 79.137.174.0/23 table 1 pref 300
ip rule add to 79.137.183.0/24 table 1 pref 300
ip rule add to 80.245.112.15/32 table 1 pref 300
ip rule add to 80.247.32.206/32 table 1 pref 300
ip rule add to 80.247.32.208/32 table 1 pref 300
ip rule add to 82.146.58.99/32 table 1 pref 300
ip rule add to 82.202.160.193/32 table 1 pref 300
ip rule add to 82.202.184.0/23 table 1 pref 300
ip rule add to 83.137.54.41/32 table 1 pref 300
ip rule add to 85.192.48.0/21 table 1 pref 300
ip rule add to 87.98.152.149/32 table 1 pref 300
ip rule add to 87.98.175.148/32 table 1 pref 300
ip rule add to 87.226.218.132/32 table 1 pref 300
ip rule add to 87.236.16.96/32 table 1 pref 300
ip rule add to 87.236.16.120/32 table 1 pref 300
ip rule add to 87.240.128.0/18 table 1 pref 300
ip rule add to 87.250.224.0/19 table 1 pref 300
ip rule add to 88.99.70.254/32 table 1 pref 300
ip rule add to 88.210.0.0/18 table 1 pref 300
ip rule add to 89.20.144.0/21 table 1 pref 300
ip rule add to 89.208.84.0/22 table 1 pref 300
ip rule add to 89.208.196.0/22 table 1 pref 300
ip rule add to 89.222.152.0/21 table 1 pref 300
ip rule add to 90.156.244.138/32 table 1 pref 300
ip rule add to 91.103.64.0/21 table 1 pref 300
ip rule add to 91.200.28.0/22 table 1 pref 300
ip rule add to 91.205.164.53/32 table 1 pref 300
ip rule add to 91.217.153.39/32 table 1 pref 300
ip rule add to 91.227.52.0/23 table 1 pref 300
ip rule add to 91.230.61.4/32 table 1 pref 300
ip rule add to 92.53.96.178/32 table 1 pref 300
ip rule add to 92.53.98.191/32 table 1 pref 300
ip rule add to 92.53.98.245/32 table 1 pref 300
ip rule add to 92.53.118.140/32 table 1 pref 300
ip rule add to 92.241.163.105/32 table 1 pref 300
ip rule add to 93.157.9.180/32 table 1 pref 300
ip rule add to 93.157.10.114/32 table 1 pref 300
ip rule add to 93.158.128.0/18 table 1 pref 300
ip rule add to 93.159.224.0/21 table 1 pref 300
ip rule add to 93.186.224.0/21 table 1 pref 300
ip rule add to 93.186.232.0/21 table 1 pref 300
ip rule add to 94.100.176.0/20 table 1 pref 300
ip rule add to 94.143.52.0/22 table 1 pref 300
ip rule add to 95.108.128.0/17 table 1 pref 300
ip rule add to 95.142.192.0/20 table 1 pref 300
ip rule add to 95.163.32.0/19 table 1 pref 300
ip rule add to 95.163.180.0/22 table 1 pref 300
ip rule add to 95.163.208.0/23 table 1 pref 300
ip rule add to 95.163.210.0/23 table 1 pref 300
ip rule add to 95.163.212.0/22 table 1 pref 300
ip rule add to 95.163.216.0/22 table 1 pref 300
ip rule add to 95.163.248.0/21 table 1 pref 300
ip rule add to 95.173.128.111/32 table 1 pref 300
ip rule add to 95.213.0.0/18 table 1 pref 300
ip rule add to 95.213.64.0/18 table 1 pref 300
ip rule add to 95.216.201.34/32 table 1 pref 300
ip rule add to 100.43.64.0/19 table 1 pref 300
ip rule add to 104.18.36.200/32 table 1 pref 300
ip rule add to 104.18.37.200/32 table 1 pref 300
ip rule add to 104.18.52.221/32 table 1 pref 300
ip rule add to 104.18.53.221/32 table 1 pref 300
ip rule add to 104.24.124.128/32 table 1 pref 300
ip rule add to 104.24.124.160/32 table 1 pref 300
ip rule add to 104.24.125.128/32 table 1 pref 300
ip rule add to 104.24.125.160/32 table 1 pref 300
ip rule add to 104.27.154.140/32 table 1 pref 300
ip rule add to 104.27.155.140/32 table 1 pref 300
ip rule add to 104.27.156.92/32 table 1 pref 300
ip rule add to 104.27.157.92/32 table 1 pref 300
ip rule add to 104.27.168.11/32 table 1 pref 300
ip rule add to 104.27.169.11/32 table 1 pref 300
ip rule add to 104.27.170.3/32 table 1 pref 300
ip rule add to 104.27.171.3/32 table 1 pref 300
ip rule add to 104.27.178.96/32 table 1 pref 300
ip rule add to 104.27.179.96/32 table 1 pref 300
ip rule add to 104.27.180.59/32 table 1 pref 300
ip rule add to 104.27.181.59/32 table 1 pref 300
ip rule add to 104.27.182.214/32 table 1 pref 300
ip rule add to 104.27.183.214/32 table 1 pref 300
ip rule add to 104.27.186.199/32 table 1 pref 300
ip rule add to 104.27.187.199/32 table 1 pref 300
ip rule add to 104.28.14.128/32 table 1 pref 300
ip rule add to 104.28.15.128/32 table 1 pref 300
ip rule add to 104.31.64.16/32 table 1 pref 300
ip rule add to 104.31.65.16/32 table 1 pref 300
ip rule add to 109.120.152.14/32 table 1 pref 300
ip rule add to 109.200.158.155/32 table 1 pref 300
ip rule add to 109.200.158.156/32 table 1 pref 300
ip rule add to 109.235.160.0/21 table 1 pref 300
ip rule add to 109.236.89.250/32 table 1 pref 300
ip rule add to 109.254.39.4/32 table 1 pref 300
ip rule add to 128.140.168.0/21 table 1 pref 300
ip rule add to 134.0.116.36/32 table 1 pref 300
ip rule add to 136.243.66.103/32 table 1 pref 300
ip rule add to 141.8.128.0/18 table 1 pref 300
ip rule add to 145.239.95.188/32 table 1 pref 300
ip rule add to 149.5.244.132/32 table 1 pref 300
ip rule add to 151.80.149.182/32 table 1 pref 300
ip rule add to 151.236.80.10/32 table 1 pref 300
ip rule add to 178.22.88.0/21 table 1 pref 300
ip rule add to 178.33.183.157/32 table 1 pref 300
ip rule add to 178.154.128.0/17 table 1 pref 300
ip rule add to 178.210.84.61/32 table 1 pref 300
ip rule add to 178.237.16.0/20 table 1 pref 300
ip rule add to 178.248.232.36/32 table 1 pref 300
ip rule add to 178.248.232.60/32 table 1 pref 300
ip rule add to 178.248.232.183/32 table 1 pref 300
ip rule add to 178.248.233.26/32 table 1 pref 300
ip rule add to 178.248.233.32/32 table 1 pref 300
ip rule add to 178.248.233.136/32 table 1 pref 300
ip rule add to 178.248.234.60/32 table 1 pref 300
ip rule add to 178.248.234.76/32 table 1 pref 300
ip rule add to 178.248.235.82/32 table 1 pref 300
ip rule add to 185.5.136.0/22 table 1 pref 300
ip rule add to 185.6.244.0/22 table 1 pref 300
ip rule add to 185.16.148.0/22 table 1 pref 300
ip rule add to 185.16.244.0/22 table 1 pref 300
ip rule add to 185.20.225.220/32 table 1 pref 300
ip rule add to 185.29.130.0/24 table 1 pref 300
ip rule add to 185.32.184.0/23 table 1 pref 300
ip rule add to 185.32.186.0/24 table 1 pref 300
ip rule add to 185.32.187.0/24 table 1 pref 300
ip rule add to 185.32.248.0/22 table 1 pref 300
ip rule add to 185.54.220.0/24 table 1 pref 300
ip rule add to 185.54.221.0/24 table 1 pref 300
ip rule add to 185.54.222.0/24 table 1 pref 300
ip rule add to 185.54.223.0/24 table 1 pref 300
ip rule add to 185.71.67.147/32 table 1 pref 300
ip rule add to 185.71.76.0/22 table 1 pref 300
ip rule add to 185.76.252.0/22 table 1 pref 300
ip rule add to 185.85.10.0/24 table 1 pref 300
ip rule add to 185.85.11.0/24 table 1 pref 300
ip rule add to 185.85.12.0/24 table 1 pref 300
ip rule add to 185.85.14.0/24 table 1 pref 300
ip rule add to 185.85.15.0/24 table 1 pref 300
ip rule add to 185.114.137.26/32 table 1 pref 300
ip rule add to 185.114.137.166/32 table 1 pref 300
ip rule add to 185.129.100.135/32 table 1 pref 300
ip rule add to 185.129.100.136/32 table 1 pref 300
ip rule add to 185.165.123.147/32 table 1 pref 300
ip rule add to 185.165.123.168/32 table 1 pref 300
ip rule add to 186.2.163.12/32 table 1 pref 300
ip rule add to 188.93.56.0/21 table 1 pref 300
ip rule add to 188.130.254.8/32 table 1 pref 300
ip rule add to 188.246.224.163/32 table 1 pref 300
ip rule add to 192.88.99.0/24 table 1 pref 300
ip rule add to 192.185.224.83/32 table 1 pref 300
ip rule add to 193.47.33.104/32 table 1 pref 300
ip rule add to 193.47.166.183/32 table 1 pref 300
ip rule add to 193.109.246.217/32 table 1 pref 300
ip rule add to 193.124.16.17/32 table 1 pref 300
ip rule add to 193.124.47.100/32 table 1 pref 300
ip rule add to 193.124.118.196/32 table 1 pref 300
ip rule add to 193.124.177.199/32 table 1 pref 300
ip rule add to 193.124.200.236/32 table 1 pref 300
ip rule add to 193.124.207.97/32 table 1 pref 300
ip rule add to 193.228.160.35/32 table 1 pref 300
ip rule add to 193.228.160.46/32 table 1 pref 300
ip rule add to 193.228.160.47/32 table 1 pref 300
ip rule add to 193.228.160.49/32 table 1 pref 300
ip rule add to 193.228.160.50/32 table 1 pref 300
ip rule add to 193.228.160.51/32 table 1 pref 300
ip rule add to 193.228.160.53/32 table 1 pref 300
ip rule add to 193.228.160.54/32 table 1 pref 300
ip rule add to 193.228.160.57/32 table 1 pref 300
ip rule add to 193.228.160.59/32 table 1 pref 300
ip rule add to 193.228.160.198/32 table 1 pref 300
ip rule add to 193.238.75.185/32 table 1 pref 300
ip rule add to 193.238.75.217/32 table 1 pref 300
ip rule add to 194.11.28.2/32 table 1 pref 300
ip rule add to 194.58.56.137/32 table 1 pref 300
ip rule add to 194.58.112.173/32 table 1 pref 300
ip rule add to 194.85.20.0/24 table 1 pref 300
ip rule add to 194.88.208.0/23 table 1 pref 300
ip rule add to 194.186.63.0/24 table 1 pref 300
ip rule add to 195.5.108.94/32 table 1 pref 300
ip rule add to 195.39.248.59/32 table 1 pref 300
ip rule add to 195.42.165.35/32 table 1 pref 300
ip rule add to 195.42.165.36/32 table 1 pref 300
ip rule add to 195.88.252.0/23 table 1 pref 300
ip rule add to 195.93.246.56/32 table 1 pref 300
ip rule add to 195.93.247.69/32 table 1 pref 300
ip rule add to 195.128.121.187/32 table 1 pref 300
ip rule add to 195.177.205.0/24 table 1 pref 300
ip rule add to 195.189.16.140/32 table 1 pref 300
ip rule add to 195.201.120.144/32 table 1 pref 300
ip rule add to 195.211.20.0/22 table 1 pref 300
ip rule add to 195.211.128.0/22 table 1 pref 300
ip rule add to 195.211.223.14/32 table 1 pref 300
ip rule add to 195.218.168.0/24 table 1 pref 300
ip rule add to 195.218.190.0/23 table 1 pref 300
ip rule add to 199.21.96.0/22 table 1 pref 300
ip rule add to 199.36.240.0/22 table 1 pref 300
ip rule add to 208.87.93.0/24 table 1 pref 300
ip rule add to 208.87.94.0/24 table 1 pref 300
ip rule add to 208.87.95.0/24 table 1 pref 300
ip rule add to 212.8.247.66/32 table 1 pref 300
ip rule add to 212.110.158.230/32 table 1 pref 300
ip rule add to 212.118.32.0/19 table 1 pref 300
ip rule add to 213.159.210.99/32 table 1 pref 300
ip rule add to 213.180.192.0/19 table 1 pref 300
ip rule add to 217.16.26.102/32 table 1 pref 300
ip rule add to 217.16.27.89/32 table 1 pref 300
ip rule add to 217.20.144.0/20 table 1 pref 300
ip rule add to 217.69.128.0/20 table 1 pref 300
ip rule add to 217.182.78.61/32 table 1 pref 300
ip rule add to 104.103.84.34/32 table 1 pref 300
nextdns start
nextdns activate
Fraunhofer
Member
Аватар користувача

Повідомлення

terminahtor: 01.03.2023 15:04
Fraunhofer: 01.03.2023 13:37Есть VPN-клиент для ПК, на котором отсутствует функция Split tunneling.
доступ до "заборонених" ресурсів - через VPN
Це мені не зовсім підходить, бо потрібно пускати через VPN повністю програми, а не окремі ресурси.
terminahtor
Member
Аватар користувача
Звідки: Київ

Повідомлення

Fraunhofer
Так, трохи неуважно прочитав:)
У-у-у-у-у, тут не знаю як таке організувати. В SurfShark, яким користуюсь, є такий функціонал, але, наскільки я зрозумів, це не варіант. Хоча зроблено дуже зручно, в 1 клік.
Відповісти