Device and method for split tunneling

Abstract

An electronic device according to one embodiment acquires a security rule for supporting split tunneling—the security rule includes a plurality of records for determining whether to bypass a VPN tunnel—and checks the execution condition of a first operation related to VPN tunnel bypass by comparing information based on a first offset within a first element of a packet based on a first record included in the security rule with a first value; if the execution condition of the first operation is satisfied and the first operation indicates a second record included in the security rule, it checks the execution condition of a second operation related to VPN tunnel bypass by comparing information based on a second offset within a second element of a packet based on the second record with a second value; if the execution condition of the first operation or the second operation is satisfied and the first operation or the second operation indicates bypass of the VPN tunnel, it encapsulates the packet without including it in the VPN tunnel and transmits it to a packet forwarding server; and if the execution condition of the first operation or the second operation is not satisfied, it includes the packet in the VPN tunnel and transmits it to a packet forwarding server. Various other embodiments are possible.

Images