5

In our company we have a software which requires a VPN to be connected in order to properly work. However that is not the only software we use here. The problem is that other software get way slower when the VPN is up. Apart from that, we don't want all our data traffic to pass through this connection.

Is there a way to isolate the VPN connection specific for a single software?

Malo Polsky
  • 105
  • 2
  • 6
  • On which OS would you like to do that? – user2313067 Sep 09 '15 at 14:28
  • I asked this same question on SuperUser: http://superuser.com/questions/897549/how-can-i-control-which-traffic-goes-through-a-vpn if you're interested in reading more about the split tunneling. – tpg2114 Sep 09 '15 at 17:27

3 Answers3

15

Is there a way to isolate the VPN connection specific for a single software?

I would isolate the VPN for a specific route. This can be achieved with the system routing configuration.

This specific routing options for a VPN are called in general Split tunneling.

Is the software contacting always the same endpoint at the other side? Then it's pretty easy, since you only have to add a single IP (subnet) to route through the VPN.

p2k
  • 161
  • 5
6

Is there a way to isolate the VPN connection specific for a single software?

You could create a virtual machine, install the software and setup the VPN within the virtual machine. By doing that you fulfill all your requirements.

The only drawback is the shared hardware resource, which could negatively influence the performance of other applications.

1

Yes, it is possible to create a routing rule on the operating system which routes traffic with a specific destination to a particular interface or gateway.

So if your application has a specific server with a known IP address, you could create a rule that routes any traffic to that IP through VPN interface and all other traffic through the network adapter interface.

eg. 

Microsoft Exchange Server (192.168.1.45) -> Interface 2 (VPN)

Everything else -> Interface 1 (Network Adapter)

-

route add 192.168.1.45 mask 255.255.255.255 IF 2 metric 1

route add 0.0.0.0 mask 0.0.0.0 IF 1 metric 10

See:https://technet.microsoft.com/en-us/library/Cc757323%28v=WS.10%29.aspx

Dan Spk
  • 11
  • 1