ANSWERED eddie-cli: split-tunneling

[rgrdgr 0]

Hi,
I'm trying to exclude some sites from the VPN.  Normally I'd do this via the openvpn config file, and I'd see some instructions on doing this via the GUI.  However, I have no access to a GUI on this machine.  How can i do this using eddie-cli?  Or eddie-ui -cli?

 

[OpenSourcerer 1435]

Well, to not quote the rude four-letter thing, there's man eddie-ui
out refers to "out of tunnel".
 

--routes.custom

              Custom routes. Format: '{ip or range},{in/out},{note (optional)};...'. Separate multiple routes with ;. Example: '1.2.3.4,in;2.3.4.5/23,out,'test'

[rgrdgr 0]

Thanks!  In my own defense, I'm using eddie-cli:
 

> man eddie-cli
No manual entry for eddie-cli

Looks like I can switch to eddie-ui and use the -cli option, although I'm not sure that gains me anything.

[OpenSourcerer 1435]

eddie-cli was removed some versions ago; which one are you running? Maybe an update is due?

eddie-cli = eddie-ui -cli. You neither gain nor lose anything.

[rgrdgr 0]

Both the eddie-ui version I grabbed earlier today and eddie-cli say 2.16.3.  FYI, there is still a link to eddie-cli from eddie.website.  Perhaps rumors of its demise have been exaggerated.  ;)
 

[OpenSourcerer 1435]

Ah okay, I wasn't aware the standalone CLI version was still called eddie-cli. I only noticed the eddie-ui packages having cli removed and the versions merged into eddie-ui. Well, we never stop learning, thanks.

Does the routes.custom thing work as expected?

[rgrdgr 0]

16 minutes ago, giganerd said:

Does the routes.custom thing work as expected?

Hmm, no it doesn't look like it.  I'm running eddie-ui with this command:

/usr/bin/eddie-ui --cli --connect --server=XXX --login=uuu --password=ppp --routes.custom='69.16.179.29,out;69.16.179.28,out'

Neither destination gets added to my routing table, and if I use traceroute they go through the vpn.

Maybe I should make my own script to modify the routing table and invoke it with --event.vpn.up.filename.

[OpenSourcerer 1435]

1 hour ago, rgrdgr said:

Neither destination gets added to my routing table, and if I use traceroute they go through the vpn.

Interesting. Can you maybe test 2.18.x? You can use the portable, in case you don't want to override the stable.

[fudgelfreck 0]

On 3/24/2020 at 3:59 PM, rgrdgr said:

Hmm, no it doesn't look like it.  I'm running eddie-ui with this command:

/usr/bin/eddie-ui --cli --connect --server=XXX --login=uuu --password=ppp --routes.custom='69.16.179.29,out;69.16.179.28,out'

Neither destination gets added to my routing table, and if I use traceroute they go through the vpn.

Maybe I should make my own script to modify the routing table and invoke it with --event.vpn.up.filename.

Is this how you exclude a website from the VPN? I particularly do not want my Internet TV included in the VPN because it really slows down. Thank you.

[OpenSourcerer 1435]

2 hours ago, fudgelfreck said:

Is this how you exclude a website from the VPN?

You can only exclude IP addresses.

[rgrdgr 0]

You might be able to do it by IP addresses. I don't actually do this anymore - it was much easier to use docker containers to do the split tunneling.  I have one container for OpenVPN and then everything I want to tunnel uses that container for its network.  But I only had a few services I wanted to tunnel.