Full-time "no-log VPN" users: how do you access restricted sites that dont work over VPN?

[ahuman]

I use tinyproxy and a second browser profile for bypassing my privacy VPN as needed on the web.

Please help: domain-based bypass of Wireguard VPN

Tinyproxy uses by default user nobody to run the service. This makes it possible to create an ip rule based on uid. Enable the service and allow access from the local network. uci set tinyproxy.@tinyproxy[0].enabled='1' uci add_list tinyproxy.@tinyproxy[0].Allow='192.168.0.0/16' # Change it if your LAN subnet starts with 172. or 10. uci commit tinyproxy /etc/init.d/tinyproxy restart Add the following to /etc/config/network: config route option table '101' option interface '…

You can tweak that solution slightly to eliminate the need for a static WAN gateway with this:

Script to detect new gateway & rewrite routing rule?

Try the following: Remove the entry that creates a default route in the custom routing table. Add this to the wan interface section: option ip4table '101' # <-- Correct table ID here This way the default route should be created automatically and updated if there are changes.

Consider tinyproxy's listen, bind, and whitelist configuration carefully to avoid unexpected behaviour. You'll almost certainly need to whitelist CloudFlare in addition to your other sites since so many services are behind it for DDOS and scraper mitigation.