Split tunneling explained: use the VPN only for some apps

Two lanes

When VPN is on, Android creates a virtual network interface. With split tunneling, you define exceptions: listed items use the “without VPN” lane and everything else stays in the “with VPN” lane. The choice is applied on your device. YamYam does not receive your app list or site rules, so this part remains local. It is not two VPNs at once; it is routing traffic by your choices.

When is it useful?

You might want a local service or home printer to connect directly while a browser and messenger use the VPN. You may also be testing a site and want to separate a direct-network problem from a tunnel problem. A game or service that reacts badly to route changes can be placed on the direct lane. If your goal is for every packet to use the tunnel, create no exceptions: every item in the direct lane intentionally bypasses it.

Selecting apps

Open YamYam Settings and find “Apps and sites without VPN”. The app list is read on your device so you can recognise names and icons. Select an app and assign the direct lane. Some apps have separate helper components, such as a browser download service. If the result is not what you expect, review related components too. App choices apply across connection modes, while site rules can depend on the route mode; the in-app note explains the distinction.

Site rules

For sites you can use a whole domain, an exact host or a regular expression. A whole domain such as example.com can include subdomains; an exact host is narrower. Regex is powerful but easy to get wrong, so start with a simple domain and use YamYam’s tester. Do not add a broad pattern when you only need one host. Ports, paths and subdomains can change the match.

Common mistakes

“Without VPN” does not mean more private or more secure; that lane goes straight to your network and destination. Changes may apply on the next connection, so use Apply now or reconnect if the app says so. A third-party app can use several domains for login, media and notifications. Finally, remove temporary bypasses after troubleshooting so an old exception does not surprise you later.

A sensible troubleshooting order

1. Confirm split tunneling is enabled and the item is in the intended lane.
2. Temporarily remove the bypass and test a fresh VPN connection.
3. Check spelling and match type for a site rule.
4. Note the connection mode; a site rule may behave differently in an Exclusive route.
5. If it still fails, email support with device ID and app version—never a token or password.

Keep the list small and understandable. Add one exception, test it, and remember which traffic you deliberately moved outside the tunnel.