Google bakes vpn split tunneling into android 17, no paid add-on required
Google just yanked split tunneling out of the paywall ghetto. android 17 Beta 3 ships today with the feature baked into the operating system, meaning you can soon tell Netflix to ignore your VPN while your banking app stays inside the encrypted pipe—no subscription upsell, no bandwidth cap, no third-party hack.
The feature power users already paid for
Until this morning, split tunneling was a luxury perk locked inside a handful of premium VPN clients. Proton, Nord and Surfshark either charged extra or throttled the traffic you could sidestep. Google’s move flips the business model: the OS now exposes a standard API any VPN app can call for free. If your provider drags its feet, you simply switch to one that doesn’t.
The catch—because there is always a catch—is that legacy VPN developers must rewrite a slice of their code to plug into the new framework. Google won’t flip the switch automatically; lazy devs can keep you locked in their paid tier if they choose. Early adopters already report that the open-source WireGuard client is ready, while a few big-name commercial apps are still ‘evaluating timelines’.
Why this matters outside the nerd bubble
Split tunneling is the quiet hero of any borderless internet diet. Streamers want Disney+ in 4K without routing every byte through Singapore; journalists need their notes encrypted while Slack stays on the home ISP for speed. By pushing the logic into the system, Google kills the battery drain of redundant encryption and ends the cat-and-mouse game of IP blacklist updates.
More importantly, it defangs the data-harvesting argument that ‘free’ VPNs love: if only the sensitive apps touch the VPN server, the provider has far less traffic to monetize. The change arrives two months after the EU labeled split tunneling a ‘privacy best practice’ for corporate devices—timing that feels less like coincidence and more like pre-emptive compliance.
android 17 is slated to reach platform stability in August. When it drops, the phrase ‘premium split tunneling’ should sound as antiquated as dial-up tones. VPN makers can either swallow the new reality or watch users walk. The clock started ticking the moment the beta hit the servers.