Bypassing VPN

[Q-user#]

I have a pihole set up and connected to an Asuswrt-Merlin router. Pihole acts as the DHCP server and handles all DNS requests. All traffic is routed through the pihole and then an OpenVPN client on the Asus router. Everything working as expected, all ads are blocked.
The problem arises when I want to watch Netflix as it detects the VPN. How do I get my SmartTV to bypass the VPN?

 

[Butterfly Bones]

Use Policy Based Routing.

Policy based routing

Third party firmware for Asus routers (newer codebase) - RMerl/asuswrt-merlin.ng

github.com

Look at the examples near the bottom, and note the one labeled "PC1-bypass". With your Smart TV, assign it a static IP and then do something like this.

LAN        192.168.1.0/24    0.0.0.0        VPN
Router        192.168.1.1    0.0.0.0        WAN
TV    192.168.1.???    0.0.0.0    WAN

All programs on the TV will bypass the VPN and use the WAN, that is how I have mine set since all services I use are stopped by VPN - Netflix, Amazon Prime, Peacock, YouTube TV, etc.

If you are watching from one or multiple computers, it gets more complicated, see x3mRouting ~ Selective Routing for Asuswrt-Merlin Firmware.

x3mRouting - x3mRouting ~ Selective Routing for Asuswrt-Merlin Firmware

x3mRouting Version 2.4.0 now available! 29 September, 2020 Migrating from Version 1.0 Version 2.0.0 Update Process - update instructions Version 2.0.0 Changes - see what's changed! x3mRouting includes selective routing features for LAN Clients, OpenVPN Clients and OpenVPN Servers. If coming...

www.snbforums.com

 

[MaziahBebop]

How do I get my SmartTV to bypass the VPN?

A quick and easy way?

Use the VPN Client tab to setup exclusive routing. Make an exception for the TV:

Just remember to hit the (+) before applying, so the setting sticks.

My setup is a bit different to yours though, so you would need to adapt the settings to suit. I have the ASUS router as my DHCP server, because that's what its good at, and my pihole as the DNS server. All the clients of the second router (ArcherD2) are routed through the VPN, but you don't need a second router for it to work, just have manual IP assignments in the LAN -> DHCP tab.

Something like this on the LAN -> DHCP Server tab: