NetRuleRouter Alpha Released to Route Traffic Across Multiple Connections Without Disabling VPN

Developer krox1 has published the first public alpha of NetRuleRouter v0.1.0-alpha.1 for Windows and Linux, a local network policy manager designed to route specific sites, applications, and networks through different connections while a VPN remains active.

The project addresses a common friction point: when a VPN is enabled, many Russian banks, marketplaces, and government services request that it be disabled; when it is turned off, foreign services become unreachable or suffer regional restrictions. The developer began work on 1 April 2026 after reports that Russia’s Ministry of Digital Development was discussing VPN limitations with platforms, followed by real-world prompts from operators and the Gosuslugi app in April 2026.

How NetRuleRouter Works

NetRuleRouter is not a VPN client, proxy, or anonymization service. It manages traffic between two existing operating-system connections labeled Primary (direct Ethernet or Wi-Fi) and Secondary (VPN, second ISP, or another adapter). Users define rules that decide which connection each destination should use.

Supported matching methods include:

• Exact domain (api.example.com)
• Domain and all subdomains (*.example.com)
• Site across TLDs (example.*)
• Exact IPv4 or IPv6 address
• CIDR subnet or IP range
• Top-level domain or internal suffix (.ru, .intra)
• Application by executable name, path, or folder

Rules can also explicitly block destinations or applications. Overlapping rules are resolved by a documented priority engine that favors more specific matches; a visual intersection viewer helps users verify outcomes.

Leak Protection and Fail-Safe Modes

Three leak-protection modes are available. The default “Only sites from rules” mode keeps traffic assigned to the secondary connection from falling back to the primary if the VPN drops. A stricter “Everything” mode applies broader restrictions with explicit exceptions. The developer notes that the alpha still has brief windows at Windows startup and certain DNS or shared-IP edge cases, so protection is not claimed to be absolute.

Practical Use Cases

Typical configurations send Russian banks and marketplaces over the primary link, AI services such as ChatGPT, Claude, and Gemini over the secondary link, and video calls or large downloads over the primary link to avoid VPN latency. Corporate VPNs can remain active alongside a personal VPN because NetRuleRouter respects existing routes to internal company networks.

The alpha ships with region-specific presets (including a Russian set), import/export of rule collections, connection tracing that shows which process opened each socket and which route was chosen, and local history that can be disabled or cleared. A first-run wizard installs the required background service (one-time administrator rights on Windows) and helps bind the correct adapters even when VPN clients create multiple virtual interfaces.

NetRuleRouter does not accelerate connections, combine bandwidth, or protect against account-level blocks by service providers. Its sole purpose is deterministic, user-controlled routing between already-established network interfaces.