On Android, App Split Tunneling chooses which apps use the VPN. iPhone and iPad cannot split by app. That is an Apple system limit. On Windows, macOS, and Linux there is no per-app checklist. Proxy Mode already sends through the VPN only the apps that read the system proxy. TUN Mode takes all traffic; to keep one site off it, add one direct domain rule.
Android
Open Settings > Rules Settings > App Split Tunneling (or Settings > Rules > App Split Tunneling). After settings were reorganized into Connection, Split tunnel, Updates, and Account, a control you cannot find is usually under Split tunnel. The feature is experimental and exists only on Android.
- Turn on App Split Tunneling.
- Choose one mode:
- Bypass selected apps: selected apps skip the VPN, and other apps use it. This fits a bank app or a local streaming app.
- Only selected apps use VPN: only the selected apps use the VPN, and other apps stay direct. Google services are included automatically. This fits limiting the VPN to a browser.
- Tap Select apps, search for the one you want, and tick it. If you need system apps, turn on Show system apps.
- Reconnect. Open one selected app and one app you did not select.
Desktop
- To send only proxy-aware apps such as the browser through the VPN, use Proxy Mode. Apps that ignore the system proxy stay direct. See TUN mode or proxy mode.
- If you are already in TUN Mode and want one website off the VPN, add one direct domain rule. Record the old setting, reconnect, and test. See website rules.
How to tell it worked
VilaNet stays Connected. In bypass mode, a selected app opens its own page and an unselected app still uses the VPN. In VPN-only mode, a selected app works through the VPN and an unselected app does not. On a computer in Proxy Mode, the browser loads a site and an app that ignores the system proxy stays direct.
Still not working?
- Change one app or one domain rule at a time. If ordinary sites also fail, restore the change and read Connected but no internet.
- iPhone and iPad cannot exclude one app (Apple limit). To keep one website off the VPN, use a domain rule.
- If you still need help, open Contact Support in the app and name the platform, the mode, and the app you wanted to exclude.
The shared rule steps are in Routing and domain rules.