"
Hi,
I'm trying to set up ProtonVPN in France using OpenVPN on my OPNsense 26.1 system, but I only want to route certain IPs - specifically the ones for my streaming service - through the VPN. For all my other internet traffic, I want to use my regular WAN connection from my Canadian ISP.
My setup:
OPNsense 26.1.8 on mini PC
WAN: Canadian ISP (igc1)
ProtonVPN France OpenVPN client (ovpnc1)
Firewall aliases France_IPs with policy routing → PROTONFR_VPNV4 gateway
DNS: AdGuard Home → Unbound → Internet via ovpnc1
Problem:
ProtonVPN pushes redirect-gateway def1 which forces ALL traffic through the VPN tunnel, even with route-nopull option. When I use route-nopull, the selective routing rules stop working because the gateway becomes unreachable.
What I tried:
route-nopull → breaks gateway for selective routing
route-noexec → tunnel breaks completely
Username +nr suffix → still redirects traffic
Excluded routes 0.0.0.0/0 and ::/0 → no effect
Question:
How can I use ProtonVPN OpenVPN as a selective gateway on OPNsense without it hijacking all traffic?
Thanks!
I'm trying to set up ProtonVPN in France using OpenVPN on my OPNsense 26.1 system, but I only want to route certain IPs - specifically the ones for my streaming service - through the VPN. For all my other internet traffic, I want to use my regular WAN connection from my Canadian ISP.
My setup:
OPNsense 26.1.8 on mini PC
WAN: Canadian ISP (igc1)
ProtonVPN France OpenVPN client (ovpnc1)
Firewall aliases France_IPs with policy routing → PROTONFR_VPNV4 gateway
DNS: AdGuard Home → Unbound → Internet via ovpnc1
Problem:
ProtonVPN pushes redirect-gateway def1 which forces ALL traffic through the VPN tunnel, even with route-nopull option. When I use route-nopull, the selective routing rules stop working because the gateway becomes unreachable.
What I tried:
route-nopull → breaks gateway for selective routing
route-noexec → tunnel breaks completely
Username +nr suffix → still redirects traffic
Excluded routes 0.0.0.0/0 and ::/0 → no effect
Question:
How can I use ProtonVPN OpenVPN as a selective gateway on OPNsense without it hijacking all traffic?
Thanks!
