256-bit AES - the same standard that protects banking transactions

0%

Routing rules

A profile decides what goes around the VPN and what goes through it. List your own addresses — the link is built right here, nothing is sent anywhere. Our Russian site set is one checkbox away, and the local network is always included.

Not sure what routing rules are? In short: a setting where some sites go through the VPN and some go direct. We explain it in full below, after the setup — jump to the explanation. And if you already know why you came, build your profile with the buttons above.

Your addresses

Paste them as they are: a page URL, with or without www, non-Latin names too. A list works too — commas or new lines, we sort it out.

The .ru and .рф zones, banks, government services, marketplaces, media and their CDNs — 45 addresses. Leave it off and the profile carries only yours; the local network (router, printer, TV) is included either way.

    Your link

    Open it on the device that has the app — the profile is added to the routing list and becomes the selected one. If routing itself is switched off in the app, turn it on there: without that the rules do nothing.

    How to apply it

    1. Copy the link

      Use the "For Happ" or "For INCY" button above.

      The link already carries your rules.

    2. Open it on the device with the app

      On a phone — just tap the link.

      From a computer — send it to yourself in a messenger, or open it in a browser on that same device.

    3. Allow the profile to be added

      The app asks for confirmation.

      The profile appears in the routing list as "Tainet — свои правила" and becomes the selected one.

    4. Switch routing on

      In Happ: settings → "Routing" → the "Use routing" toggle.

      Without it the profile sits in the list and the rules do nothing.

    5. Check it

      Open a site you sent direct — it should see your real address.

      Any other site keeps going through the VPN.

    Split tunnelling: how to build it and apply it

    Split tunnelling by site is exactly what routing rules are: part of the traffic goes through the VPN, part goes direct. Inside Happ and INCY the feature is called “routing”.

    Here is how to build your own profile in a couple of clicks:

    1. Press “For Happ” or “For INCY” above — whichever app you use.
    2. You can add our ready list of local sites and services, or enter your own addresses.
    3. Copy the generated link and add it in the app — the profile applies itself.

    A routing profile for INCY and for Happ is built the same way; only the format of the link each button generates differs. Splitting by site works on both Android and iPhone.

    Routing is a feature of the client itself (Happ, INCY), so it works with any working subscription, not only ours. But with Tainet the ready profile is added with one link, and the rules do not fall off — a modern protocol and our own infrastructure keep the connection steady. The first 7 days are free, no card.

    Try Tainet for free →

    Routing rules could not be applied: why, and what to do

    When routing rules do not apply, the cause is usually one of three.

    First — the app has not finished downloading the geo files

    These are lists of domains and IPs by country; without them the rules do not work. The sign: a red exclamation mark appears next to the profile. What to do: refresh the profile in the app, or rebuild the list here and add the fresh link — the old one may have gone stale.

    Second — the profile attached to the wrong subscription

    Routing rules attach to the subscription they were added under. If you have several, check that the profile sits on the active one — the one you are connecting through right now.

    Third — your rules were overwritten by the subscription

    Some services ship their own routing profile along with the subscription, and on refresh it can replace the one you set up by hand. If the rules seem to have reset themselves, this is the likely reason: add your profile again after the subscription refreshes.

    If you would rather not deal with this by hand, take a subscription where the ready profile is added with one link and then simply works: connect Tainet, 7 days free, no card.

    Connect in a minute →

    What routing rules are, in plain words

    With a VPN on, all your traffic normally goes through it — foreign sites and local ones alike. But local sites often work worse that way: banks and government services dislike visits through a tunnel, and the speed to them drops.

    Routing rules fix that. You tell the app yourself what goes through the VPN and what goes direct:

    • local sites (bank, government services, delivery) — direct, outside the tunnel;
    • everything else — through the VPN.

    This is also called split tunnelling. Doing it by hand takes a while — so use the tool above to assemble a ready list in a couple of clicks and add it to the app with a single link.

    Routing rules for Happ and routing in INCY are set up the same way: you build the profile in the tool above and add the link in the app.

    The finished profile works in the step-by-step Happ setup and in the INCY client for iPhone. And for all of it to hold, you need a working subscription — try Tainet free for 7 days, no card.

    Build the rules and connect →

    Routing rules are half the job. The other half is a VPN that does not drop

    You can build the profile with any subscription. But if the service keeps falling over, rules will not save it. Tainet runs on VLESS with Reality masking and our own infrastructure — the connection holds steady, and the ready profile goes into Happ or INCY with a single link.

    Try it — 7 days free, no card →

    Rules decide where, the VPN decides how

    Routes split the traffic, but it is the VPN that encrypts the channel and hides your address. Without it, rules only split what your provider already sees.

    Try Tainet

    The addresses you type are sent nowhere: the link is built in this tab. Open the Network panel — there is no request carrying them. The site does make its own requests (analytics, address lookup for the header), but your rules are not in them.