Connected, but websites do not load

In a split tunnel the DNS server has to be inside the routes

What you see

  • The WireGuard app shows the tunnel as active.
  • Addresses work but names do not, or nothing loads at all.
  • It started after you changed the routes to a list of networks.

Why it happens

Every device sends its DNS lookups to the DNS server in its configuration. When the routes list only some networks and the DNS server is not in them, lookups go outside the tunnel and fail or go around your resolver.

  1. Look at the network settings

    In the console, open Settings and compare the DNS server with the routes.

  2. Put the DNS server inside the routes

    Choose Reconfigure and add the DNS server's address to the routes, use a DNS server inside a network you already route, or use 0.0.0.0/0 to send everything through the tunnel.

  3. Download every configuration again

    Routes and DNS are written into each device's configuration, so each device needs a fresh download or QR code after the change.

Related problems