Proton and Nord Update Windows Software to Offer App-Level Split Tunneling
New settings allow users to exclude specific programs from VPN protection, reducing speed losses for gaming and local network access.
By Layla Fontaine ·

Proton and Nord have added app-level split tunneling controls to their Windows software, enabling users to exclude specific programs from VPN coverage. This feature allows individuals to determine which applications route traffic through the encrypted VPN bridge and which connect directly to the internet.
The primary benefit of this configuration is the reduction of speed trade-offs associated with standard VPN usage. While virtual private networks mask user locations and prevent internet service providers from viewing browsing activity, the encryption process can slow down data transmission. By keeping high-bandwidth applications like online games outside the tunnel, users can maintain lower latency connections without sacrificing security for other tasks.
Local network access and location-based services also benefit from this selective approach. Users can bypass the VPN for smart home devices, printers, and local movie ticketing apps to ensure proper detection of nearby hardware and accurate regional data. Without split tunneling, a VPN might obscure a user's physical location, causing local weather forecasts or showtimes to reflect the server's location rather than the user's actual position.
In the ProtonVPN Windows client, the split tunneling option appears on the right side of the main console near the kill switch and port forwarding settings. Users can select a specific list of apps to include in the tunnel or designate apps to exclude, with all remaining traffic following the opposite rule. NordVPN users access the feature through the settings cog in the bottom left corner, where they can toggle the option and select individual applications for protection.
Most commercial VPN providers now include some form of split tunneling, particularly in paid subscription tiers. The implementation varies by platform, with iPhones typically restricting users to excluding websites and IP addresses rather than specific apps, a limitation not present in the Windows desktop versions of Proton and Nord. The setup process is generally a one-time configuration that does not require ongoing adjustment.
The feature supports different routing methods, including app-based selection and URL-based rules that operate on domain names. Route-based and policy-based tunneling exist but are less common in consumer software, serving primarily those managing networks for multiple users. For the average consumer, the app-based method provides the most straightforward way to balance security needs with performance requirements.





