Split vs Full Tunnel
Route traffic choices.
Split vs Full Tunnel is a free Cyber Security Academy lesson on CoddyKit — lesson 3 of 4. You can read the complete lesson below for free — then practise it hands-on in the browser with a built-in code editor and a 24/7 AI tutor. It is part of the Cyber Security Academy learning path, one of 4 lessons in the course, and your progress syncs across the web and the CoddyKit app.
How VPN Routing Decides
When you connect a VPN, your device must decide which traffic goes through the tunnel.
Two main approaches exist: full tunnel and split tunnel.
Full Tunnel
In a full tunnel, all of your traffic goes through the VPN, including normal web browsing.
Everything is routed to the company network first, then out to the internet from there.
Full Tunnel Benefits
Full tunnel gives strong control.
- All traffic is inspected and filtered
- Corporate security policies apply everywhere
- Activity is logged centrally
Full Tunnel Drawbacks
Sending everything through the VPN has costs.
- More load on the VPN gateway
- Possible slowdowns for the user
- Even casual browsing uses the corporate link
Split Tunnel
In a split tunnel, only traffic bound for the corporate network uses the VPN.
Other traffic, like personal browsing, goes directly out to the internet.
Routing example:
10.0.0.0/8 -> VPN tunnel (corporate)
everything else -> local internetSplit Tunnel Benefits
Split tunneling improves performance.
- Less traffic on the VPN gateway
- Faster access to public sites and cloud apps
- Lower bandwidth costs
Split Tunnel Risks
Convenience brings security trade-offs.
Traffic that bypasses the VPN is not inspected or logged by corporate controls, and a compromised device could form a bridge between the internet and the internal network.
When to Use Full Tunnel
Choose full tunnel when security and visibility outweigh speed.
It suits highly sensitive environments where every connection must pass through corporate inspection and logging.
When to Use Split Tunnel
Split tunnel fits performance-sensitive setups.
It works well when many users stream video calls or use trusted cloud services that do not need to traverse the corporate network.
Selective Split Tunneling
Many organizations use a middle path.
They send only specific trusted destinations directly (such as a known video service) while routing everything else through the VPN for inspection.
Policy Decision
The choice is a policy decision balancing risk and performance.
It should match the data sensitivity, the threat level, and the capacity of the VPN infrastructure.
Quick Check
Test your understanding of split versus full tunnel.
Recap
Tunnel routing choices:
- Full tunnel - all traffic through the VPN; maximum control, more load
- Split tunnel - only corporate traffic tunneled; faster, but less visibility
The decision balances security against performance.
Frequently asked questions
Is the “Split vs Full Tunnel” lesson free?
Yes — the full text of “Split vs Full Tunnel” is free to read here on the web, and the Cyber Security Academy course includes 4 lessons in total. To practise it interactively (a built-in code editor and a 24/7 AI tutor) and unlock the rest of the Cyber Security Academy course, upgrade to CoddyKit PRO.
What will I learn in “Split vs Full Tunnel”?
Route traffic choices. You practise Cyber Security Academy with hands-on code you run directly in the browser, and a 24/7 AI tutor answers your questions as you work through the lesson.
Do I need any experience to start Cyber Security Academy?
No prior experience is required. Cyber Security Academy on CoddyKit is structured for beginners through advanced learners; this is — lesson 3 of 4, so you can start here or from the beginning and move at your own pace.
How long does the “Split vs Full Tunnel” lesson take?
Most CoddyKit lessons take about 5–10 minutes. Each one is bite-sized and interactive, so you make steady progress and pick up exactly where you left off across the web and the app.
Can I write and run code in this Cyber Security Academy lesson?
Yes. Every Cyber Security Academy lesson includes a built-in code editor, so you write and run real code right in your browser and get instant AI feedback — no local setup required.
All lessons in this course
- How VPNs Work
- VPN Protocols
- Split vs Full Tunnel
- Zero Trust Remote Access