Does anyone know how to enable the split tunnel feature in the Eddie client on macOS? I’ve heard that newer Macs don’t support this feature. Are there any other workarounds I can use?

I have a media server set up on my MacBook Pro m1. I’m trying to figure out a way to only use the split tunnel feature for Qbittorrent through the Eddie client or OpenVPN/WireGuard. Any suggestions would be greatly appreciated.

you are viewing a single comment's thread
view the rest of the comments

[–] renard_roux@beehaw.org 3 points 5 days ago (2 children)

I'm in virtually the same situation, although qbit is running in Docker through a Gluetun/Wireguard tunnel, so that part works fine.

I really wanted to do split tunnel on my Mac to access my tracker's site (all Linux ISOs, of course) through the same tunnel, and haven't had any success.

My workaround is running LibreWolf (modded Firefox) in the same stack, through the same tunnel. It's not ideal, but at least it works.

Do update if you find a solution!

[–] land@lemmy.ml 2 points 5 days ago* (last edited 5 days ago) (1 children)

The Docker version you’re using supports VPN? I used VPN+QBit Docker on my old Unraid server. You just put the VPN configuration file in the /config folder, and it worked seamlessly without disrupting any other services.

I have seen some people mention using a vm as an alternative. I’m not familiar with how it would work.

I have also tried using OpenVPN and WireGuard with AirVPN; however, Mac versions do not have the split tunnel feature at all.

[–] renard_roux@beehaw.org 2 points 4 days ago (1 children)

Gluetun is running in a container in the same stack as Qbit, and Qbit knows to get its network through Gluetun.

network mode > service > gluetun or something similar (syntax is def. wrong) in the Compose.

Gluetun is connected to AirVPN through / with / using (?) WireGuard. I'm actually a bit foggy on the terminology 😅

[–] land@lemmy.ml 1 points 4 days ago (1 children)

/config is just a folder where you put vpn config files. Would you mind sharing your docker compose file.

[–] renard_roux@beehaw.org 1 points 2 days ago

### GLUETUN

services:
  gluetun:
    image: qmcgaw/gluetun
    container_name: gluetun
    cap_add:
      - NET_ADMIN
    devices:
      - /dev/net/tun:/dev/net/tun
    ports:
      - 8888:8888/tcp # HTTP proxy
      # - 8388:8388/tcp # Shadowsocks
      # - 8388:8388/udp # Shadowsocks
      - 8090:8090/tcp # qbittorrent
      - xxxx:xxxx/tcp
      - 3423:3000/tcp # librewolf
    volumes:
      - /volumex/docker/gluetun:/gluetun
    environment:
      - PUID=xxxx #CHANGE_TO_YOUR_UID
      - PGID=xxxx #CHANGE_TO_YOUR_GID
      - TZ=Europe/xxxx #CHANGE_TO_YOUR_TZ
      - VPN_SERVICE_PROVIDER=airvpn
      - VPN_TYPE=wireguard
      - WIREGUARD_PRIVATE_KEY=xxxx
      - WIREGUARD_PRESHARED_KEY=xxxx
      - WIREGUARD_ADDRESSES=xxx.xxx.xxx.xxx
      - SERVER_REGIONS=Europe
      - HTTPPROXY=off #change to on if you wish to enable
      - SHADOWSOCKS=off #change to on if you wish to enable
      - FIREWALL_OUTBOUND_SUBNETS=172.20.0.0/16,192.168.0.0/24 #change this in line with your subnet see note on guide.
      - FIREWALL_VPN_INPUT_PORTS=xxxx #uncomment this line and change the port as per the note on the guide
      - UPDATER_PERIOD=24h
    network_mode: bridge-xxxx
    labels:
      - com.centurylinklabs.watchtower.enable=false
    security_opt:
      - no-new-privileges:true
    restart: always


### QBITTORRENT

  qbittorrent:
    image: linuxserver/qbittorrent:5.0.1
    container_name: qbittorrent
    environment:
      - PUID=xxxx #CHANGE_TO_YOUR_UID
      - PGID=xxxx #CHANGE_TO_YOUR_GID
      - TZ=Europe/xxxx #CHANGE_TO_YOUR_TZ
      - WEBUI_PORT=8090
      - UMASK=022
    volumes:
      - /volumex/docker/qbittorrent:/config

      - /volumex/linux-isos/:/data
    network_mode: service:gluetun # run on the vpn network
    depends_on:
      gluetun:
        condition: service_healthy
    security_opt:
      - no-new-privileges:true
    restart: always

### LIBREWOLF

  librewolf:
    container_name: LibreWolf
    image: ghcr.io/linuxserver/librewolf:latest
    security_opt:
      - no-new-privileges:false
      - seccomp:unconfined
    #healthcheck:
     # test: timeout 10s bash -c ':> /dev/tcp/127.0.0.1/3000' || exit 1
      #interval: 10s
      #timeout: 5s
      #retries: 3
      #start_period: 90s
    environment:
      CUSTOM_USER: xxxx
      PASSWORD: xxxx
      TZ: Europe/xxxx
      PUID: xxxx #CHANGE_TO_YOUR_UID
      PGID: xxxx #CHANGE_TO_YOUR_GID
    volumes:
      - /volumex/docker/librewolf:/config:rw
    network_mode: service:gluetun # run on the vpn network
    restart: no 
    depends_on:
      gluetun:
        condition: service_healthy
    shm_size: "5gb"

[–] CmdrShepard42@lemm.ee 2 points 5 days ago (1 children)

Not sure if they have a client for Mac but I dropped Eddie and started using WireSock on Windows. You just configure a Wireguard config on AirVPNs site and then import it. Wiresock allows you to configure split tunneling.

[–] renard_roux@beehaw.org 1 points 4 days ago (1 children)

Heard about WireSock, but I'm on macOS, "sadly".

[–] CmdrShepard42@lemm.ee 1 points 4 days ago* (last edited 3 days ago)

I imagine there must be some other third party clients that allow you to import a Wireguard or OpenVPN config with split tunneling.

Edit: I turned my imagination into googling and it looks like a Wireguard split tunnel might work on a Mac but probably might not also. OpenVPN seemed more promising but I didn't do a whole lot of reading.