how-to

VPN Split Tunneling for Gaming: 2026 Speed Guide

Split tunneling lets you route only game traffic through a VPN while keeping other apps on a direct connection. Here is how to set it up for the best gaming performance.

February 21, 202610 min read
split tunnelingoptimizationsetupperformancepc gaming

What Is VPN Split Tunneling and Why Gamers Should Care

If you've ever fired up a VPN before a gaming session and immediately noticed your ping spike or your download speed crater, you've run into the core tension of gaming with a VPN: full encryption is great for privacy, but it's a tax on performance. Split tunneling solves that problem directly.

Split tunneling lets you decide which traffic routes through the encrypted VPN tunnel and which goes straight to the internet via your normal connection. For gamers, that usually means running your game client outside the VPN — so your in-game latency stays low — while everything else (your browser, Discord, torrent client, or any app handling sensitive data) stays protected. You get the best of both worlds: security without the performance penalty where it matters most.

This isn't a niche power-user feature anymore. In 2026, virtually every top-tier gaming VPN offers some form of split tunneling, but the implementation quality varies significantly. Some give you granular per-app control; others let you route by domain, IP range, or even invert the logic entirely so only specific apps use the VPN. Understanding those differences is what separates a good setup from a great one.

How Split Tunneling Actually Works

At a technical level, your VPN client installs a virtual network adapter on your device. In a standard full-tunnel configuration, all traffic is forced through that adapter and encrypted before it leaves your machine. With split tunneling, the VPN client maintains a routing table that selectively assigns traffic either to the VPN interface or your regular network interface based on rules you configure.

Types of Split Tunneling

Not all split tunneling implementations are equal. Here are the main flavors you'll encounter across VPN providers:

  • App-based split tunneling: The most common type. You whitelist or blacklist specific applications. If you exclude your game launcher, all packets from that app bypass the VPN entirely.
  • URL/Domain-based split tunneling: More granular. You can specify that traffic to certain domains (e.g., game update servers) bypasses the VPN while everything else is tunneled.
  • IP/Subnet-based split tunneling: Advanced routing by destination IP ranges. Useful for directing only corporate network traffic through a VPN while gaming traffic flows freely.
  • Inverse split tunneling: Flips the logic — by default, all traffic bypasses the VPN, and only apps you explicitly add get tunneled. If you only need the VPN for a handful of sensitive apps, this is the cleaner setup.
  • Router-level split tunneling (Device Groups): ExpressVPN's implementation lets you assign entire devices on your network to different tunneling rules. Your gaming PC can bypass the VPN entirely at the router level while your phone stays fully protected.

The Gaming Performance Case

The latency argument for split tunneling is straightforward. Your game traffic hits a nearby server — maybe 15-25ms away. Route that same traffic through a VPN server, and you add the round-trip to the VPN server plus the overhead of encryption/decryption. Even a fast VPN like NordVPN, which recorded an impressive average latency of just 24.94ms in independent testing, adds measurable overhead compared to a direct connection. For competitive gaming where 10ms can mean the difference between registering a hit and getting traded, split tunneling gives you your raw connection back for game traffic while keeping everything else private.

Best VPNs for Gaming Split Tunneling: Compared

The table below covers the VPNs with the strongest split tunneling implementations for gamers, using pricing data current as of early 2026.

VPNSplit Tunneling TypesSupported PlatformsStarting PriceAvg. Gaming Ping
NordVPNApp-based, URL-basedWindows, Android, Android TV$3.39/mo (Standard)24.94ms
ExpressVPNApp-based, Router (Device Groups), InverseWindows, Android, Linux, macOS ≤10, Routers$4.99/mo (2-year)
SurfsharkApp-based, URL-based, InverseWindows, macOS, Android, iOS$1.99/mo (2-year)
Proton VPNApp-based, IP-based, InverseWindows, Android$4.49/mo (2-year)
CyberGhostApp-based, URL-based (Exceptions)Windows, Android$2.19/mo (2-year)
IPVanishApp-based, Domain-basedWindows, Android, Fire TV, Vision Pro$1.97/mo (2-year)
Private Internet AccessApp, Domain, IP, Subnet, InverseWindows, Linux, Android$2.03/mo (3-year)

Newsletter

Get the latest SaaS reviews in your inbox

By subscribing, you agree to receive email updates. Unsubscribe any time. Privacy policy.

NordVPN: Best Overall for Gaming Split Tunneling

NordVPN sits at the top of this list for good reason. Its NordLynx protocol — built on WireGuard — delivers genuinely fast connections with an average tested ping of 24.94ms and average jitter of just 15ms. That's competitive enough that even if you wanted to route your game traffic through the VPN (say, to access regional servers or bypass ISP throttling), you're not sacrificing much. App-based split tunneling on Windows and Android is clean and reliable. The one knock is that macOS and iOS users don't get split tunneling support, which is a meaningful gap for some gamers. At $3.39/month on the Standard plan, it's not the cheapest option, but NordVPN has earned its price premium through a decade of consistent performance.

ExpressVPN: Best for Console and Router Setups

ExpressVPN is the standout choice if you game on a console or a device where you can't install a VPN client directly. Its router-level Device Groups feature lets you assign your PlayStation, Xbox, or Nintendo Switch to bypass the VPN while your laptop or phone stays fully tunneled — all managed from one router installation. That's a fundamentally different capability than what most VPNs offer. The inverse tunneling option adds further flexibility. The trade-off is price: at $4.99/month on the 2-year plan, it's the most expensive option here. It's also worth noting that macOS support for split tunneling is limited to macOS 10 and below, which rules it out for most modern Mac users.

Surfshark: Best Value with Cross-Platform Coverage

At $1.99/month on the 2-year plan, Surfshark is remarkably affordable for the feature set it delivers. Its Bypasser feature (the split tunneling implementation) supports app-based routing, URL-based routing, and inverse tunneling — and crucially, it works across Windows, macOS, Android, and iOS. That cross-platform breadth is rare at this price point. If you game on a Mac or an iPhone alongside your main rig, Surfshark is one of the few options that covers all your devices with proper split tunneling.

Private Internet Access: Best for Power Users

Private Internet Access offers the most granular split tunneling controls available: app-based, domain-based, IP-based, subnet-based, and inverse — plus Docker and VM support on Windows and Linux. For a technically inclined gamer who wants to route game update traffic differently from live match traffic, or who runs games inside a VM, PIA gives you the routing precision to do it. At $2.03/month on the 3-year plan, it's also one of the cheaper options. The catch is that the interface requires more comfort with networking concepts than the more consumer-friendly alternatives.

How to Set Up Split Tunneling for Gaming

The exact steps differ by VPN, but the general workflow is consistent across most providers. Here's how to configure it correctly for a gaming setup.

App-Based Setup (Most Common)

  1. Open your VPN client and navigate to Settings or Preferences.
  2. Find the split tunneling section. In NordVPN it's under the "Split Tunneling" toggle; in Surfshark it's called "Bypasser"; in ExpressVPN it's "Split Tunneling" under General settings.
  3. Choose whether you want to exclude specific apps from the VPN (standard mode) or only route specific apps through the VPN (inverse/exclusive mode).
  4. For gaming, the standard approach is to add your game launcher (Steam, Battle.net, Epic Games, EA App, etc.) and your game executable to the exclusion list. This keeps your game traffic running on your bare connection while everything else stays encrypted.
  5. Connect your VPN and launch your game. Verify the routing is working by checking your in-game ping — it should match your normal unprotected connection latency.

When to Route Game Traffic Through the VPN Instead

Split tunneling isn't always about excluding game traffic from the VPN. There are legitimate reasons to do the opposite — keeping your game inside the tunnel while excluding other apps:

  • Bypassing ISP throttling: Some ISPs throttle gaming traffic specifically. Tunneling your game through a VPN masks the traffic type and can restore full speed.
  • Accessing region-locked servers: Games sometimes lock certain servers or content to specific regions. Routing your game client through a VPN server in the target region unlocks that content.
  • DDoS protection: If you stream your gameplay or are in a competitive scene where targeted attacks are a concern, keeping your real IP hidden by routing game traffic through the VPN is a legitimate protective measure.
  • Avoiding IP bans: Some players use VPNs to access game regions where their account was banned, though this typically violates game terms of service.

Split Tunneling vs. Full Tunnel: Which Is Right for Gaming?

The honest answer is that most gamers will get the best experience from split tunneling with their game traffic excluded from the VPN. Here's why the full-tunnel approach doesn't make sense as a default:

Every packet your game sends must now travel to the VPN server, get decrypted, then travel to the game server — and the response has to make the same trip in reverse. Even a fast VPN with low overhead adds latency. For a fast-paced shooter or fighting game, that added latency is directly felt. For a turn-based strategy game or something with relaxed timing, it may not matter at all.

Split tunneling gives you the VPN's primary benefits — protecting sensitive traffic, masking your browsing activity, and securing downloads — without imposing that latency tax on your game. For the specific scenarios where routing game traffic through the VPN is useful (throttling bypass, region access, DDoS protection), you can always reconfigure your split tunneling rules on the fly rather than running everything through the tunnel all the time.

The one scenario where full tunnel genuinely makes sense: public Wi-Fi gaming. If you're on a hotel or tournament venue Wi-Fi with an untrusted network, running full tunnel protects you from packet sniffing on the local network. Even then, a well-configured split tunneling setup that tunnels everything except your game client achieves most of the same protection.

Platform Limitations Worth Knowing

Split tunneling support is inconsistent across operating systems, and this is a real factor in choosing a VPN if you game on non-Windows hardware.

macOS is the most restrictive. Apple's changes to system extension handling in recent macOS versions have made it difficult for VPN providers to implement split tunneling reliably. ExpressVPN only supports it on macOS 10 and earlier. NordVPN doesn't offer it on macOS at all. Surfshark is notably one of the few that maintains macOS split tunneling support, which makes it the default recommendation for Mac gamers.

iOS is similarly limited due to Apple's sandboxing restrictions. Surfshark supports iOS split tunneling; most others don't.

Windows has the best support across the board. All seven VPNs in this guide offer split tunneling on Windows.

Android is well-supported by most providers, making mobile gaming setups relatively easy to configure.

Consoles (PS5, Xbox, Switch) can't run VPN clients directly. ExpressVPN's router-level Device Groups is the cleanest solution here, assigning your console to bypass the VPN at the network level. Alternatively, you can configure split tunneling on your router firmware directly if you're running DD-WRT or similar, though that's a more advanced setup.

For gamers running Linux, Private Internet Access offers the most complete split tunneling feature set on that platform, including subnet-level routing and Docker/VM support that's genuinely useful for developers who also game.

Bottom Line

Split tunneling is one of the most practically valuable features a gaming VPN can offer, and it's worth treating it as a first-class requirement when picking a provider — not an afterthought. The right configuration keeps your game latency clean while still providing real privacy protection for everything else running on your machine.

For most gamers on Windows or Android, NordVPN delivers the best balance of split tunneling functionality and raw connection performance. If you're on Mac or iOS, Surfshark is the clear choice. Console gamers should look seriously at ExpressVPN for its router-level device routing. And if you want the most granular control possible over your traffic routing without spending a lot, Private Internet Access at $2.03/month is hard to beat.

Whatever you choose, take the time to configure the split tunneling rules properly rather than leaving everything in the VPN tunnel by default. Five minutes of setup will meaningfully improve your gaming experience.