Split tunneling doesn't work on macOS

[noideastowork]

Describe the bug
Split tunneling while using the WireGuard protocol doesn't work on macOS.

To Reproduce
Steps to reproduce the behavior:

1. Add wireguard config
2. Enable split tunneling
3. Turn on
4. See that non website is working (from tunneling list and not from tunneling list)

Expected behavior
Working split tunneling (for example, in Android with WireGuard in Amnezia VPN split tunneling works with apps)
Or at least get error

Log files
AmneziaVPN.log

Screenshots

UPD: It is not working not only with Wireguard but also with OpenVPN over Cloak.

Desktop:

• OS: macOS
• Version 14.4 (23E214)
• Device: Macbook Pro 2021 M1 Pro

[diyelise]

So, I have the same desktop configuration as you. Which version of Amnesia Mac OS Desktop are you using? Is there a problem if you install a different build?

AmneziaWG assigned me the youtube ip as 172.217.23.206, because I have a Dutch vps. When site tunneling is enabled, the ping command shows that packets are indeed going through this ip. When tunneling is enabled, I get a different server ip

UPD: I am using 4.2.1.0 (Jan 20 2024)

[noideastowork]

So, I have the same desktop configuration as you. Which version of Amnesia Mac OS Desktop are you using? Is there a problem if you install a different build?

AmneziaWG assigned me the youtube ip as 172.217.23.206, because I have a Dutch vps. When site tunneling is enabled, the ping command shows that packets are indeed going through this ip. When tunneling is enabled, I get a different server ip

UPD: I am using 4.2.1.0 (Jan 20 2024)

Thanks! That is interesting.

Mine is 4.6.0.3 (Jul 8 2024, 3f90ee9). I will try to test your version today later.

Also I have different MacBook with Sonoma. I will try to test both versions on it.

Another thing I want to test is another config (WireGuard one), but I don't have it so it will be complicated XD. Or maybe I can give your my config file.

[noideastowork]

Well, a strange thing happened: my WireGuard config stopped working with Amnezia VPN. Now it is working only with the WireGuard app (even on Android). Maybe something strange happened with the config (idk).

So, I installed OpenVPN over Cloak config. It works fine. But it also doesn't work with split tunneling: none website is loading at all (from the list and not from the list).

I took another MacBook and installed 4.2.1.0 (Jan 20 2024) verison and the behaviour is the same. Not working

[diyelise]

@mydarkroyalblood, So the earlier version helped you? To help the guys with debugging, could you try installing two previous release builds with the same configuration set?

As I understand it, you are using pure WG, and as for AmneziaWG? Have you tried it?

[noideastowork]

@diyelise Thanks for answering

1. Sorry for not being clear (I corrected the typo in the previous comment). Earlier version of Amnezia VPN didn't work. Same behavior.

1.1. What I see now (05.08.2024)?

• macOS. WireGuard config stopped working in Amnezia VPN on macOS. It doesn't matter whether slipping is turned on or not. The app versions 4.6.0.3 and 4.2.1.0 both exhibit the same behaviour. It indicates that the app is connected, but no website is loading.
• Android. WireGuard config in Amnezia VPN on Android started working again. App split tunneling works fine. Website split tunneling doesn't work.

1.2. Well, I can install previous builds with the same configuration settings. However, does it make sense to do so if it doesn't work on my other MacBook?

2. Yeah, I guess it is pure WG protocol. As it doesn't include Jc, Jmin, Jmax, S1, S2, H1, H2, H3, H4. However, to be honest, I don't know.

3. WireGuard and AmneziaWG apps on macOS work fine with config. Even split tunneling via AllowedIPs = works fine in both apps

[diyelise]

I can confirm that site tunneling is not working after instaled latest build. It doesn't work on 4.2.1.0 build, but apps tunneling is working awesome. So the problem is existing

Thanks a lot for you report

[noideastowork]

Thanks for your help and answer!

It's quite strange that my WireGuard configuration has stopped working on all my macOS devices, even when site tunneling is disabled. However, it works perfectly with Amnezia VPN on iOS and Android, as well as on macOS using the AmneziaWG and WireGuard apps.

It doesn't work on 4.2.1.0 build, but apps tunneling is working awesome. So the problem is existing

Yes, but app tunneling is not available on macOS. It's only available on Android (and possibly on Windows, but I don't have a Windows device within easy reach).

By the way, I tried site tunneling on iOS and was pleased to find that it works fine.

[Arkemlar]

Same for me (split tunneling doesn't work) but I'm using XRay and MacOS 12.5

[noideastowork]

Same for me (split tunneling doesn't work) but I'm using XRay and MacOS 12.5

Well, XRay doesn't work even without splitting on macOS in my case. Is there any app that can allow spit tunneling for XRay in macOS? Except Nekoray, which is so complicated and laggy.

[Arkemlar]

Well, XRay doesn't work even without splitting on macOS in my case.

In my case XRay is working without splitting.

[gsavelev]

OS: macOS version 14.6.1
Device: Macbook Air M1, 2020
AmneziaVPN: version 4.6.0.3
Protocol: XRay

I found that split tunneling works well until the target service changes the IP address. Therefore, the problem may be that AmnesiaVPN filters the target services by IP addresses (dynamic), and not by domain names (static).

[KurKuza]

Same for me (split tunneling doesn't work) I'm using AmneziaWG and MacOS 15.0.1 (Macbook pro 14, M3 pro)

[SasukeVG]

The same problem: split tunneling doesn't work on the Mac M1 Pro 14 for specified sites. However, if tunneling is set to bypass certain sites, then it works.