If preventing traffic from leaving outside your VPN matters most, enable a kill switch and automatic reconnection if your VPN app and device support them. Leave split tunneling off unless you have a specific app, destination, or route that must bypass the VPN. These controls vary by operating system and provider, and some combinations are incompatible.
What each setting does
Kill switch: block traffic when the VPN is down
A kill switch blocks internet traffic from using the ordinary connection when the VPN tunnel drops. Some provider implementations also block traffic after you deliberately disconnect. That stricter behavior is not universal: for example, Proton VPN distinguishes its standard kill switch from its advanced version, which also blocks internet access after a manual disconnect. Check your VPN app’s documentation for what its control actually does: Proton VPN’s standard kill switch explanation and advanced kill switch explanation.
As an Amazon Associate I earn from qualifying purchases.
Blocking can mean having no internet until the VPN reconnects or you turn off the restrictive setting. On Android, the system option is called “Block connections without VPN,” and Google documents using it with always-on VPN: Android Enterprise VPN setup.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Split tunneling: choose what uses the VPN
Split tunneling sends selected traffic through the VPN while excluded traffic uses the ordinary network. That excluded traffic is outside the VPN tunnel, so it does not receive the VPN’s routing protection. Android supports app allow lists (only listed apps use the VPN) and disallow lists (listed apps bypass it). Windows documents route-based split tunneling: configured routes use the VPN, while other traffic uses the physical interface. See Google’s Android VPN guidance and Microsoft’s VPN routing guide.
#1 Best Overall
- 【Five Gigabit Ports】1 Gigabit WAN Port plus 2 Gigabit WAN/LAN Ports plus 2 Gigabit LAN Port. Up to 3 WAN ports optimize bandwidth usage through one device.
- 【One USB WAN Port】Mobile broadband via 4G/3G modem is supported for WAN backup by connecting to the USB port. For complete list of compatible 4G/3G modems, please visit TP-Link website.
- 【Abundant Security Features】Advanced firewall policies, DoS defense, IP/MAC/URL filtering, speed test and more security functions protect your network and data.
- 【Highly Secure VPN】Supports up to 20× LAN-to-LAN IPsec, 16× OpenVPN, 16× L2TP, and 16× PPTP VPN connections.
- Security - SPI Firewall, VPN Pass through, FTP/H.323/PPTP/SIP/IPsec ALG, DoS Defence, Ping of Death and Local Management. Standards and Protocols IEEE 802.3, 802.3u, 802.3ab, IEEE 802.3x, IEEE 802.1q
Auto-connect: connect on a trigger
“Auto-connect” is an umbrella term, not a single feature with the same behavior everywhere. It can mean keeping a VPN active continuously or connecting only when an app, network, or resource calls for it. Android’s always-on VPN can start at boot and remain active while the device or work profile is on. Apple VPN On Demand uses profile rules to establish a connection as needed, and Windows supports app-triggered, name-triggered, and Always On profiles. Availability depends on the device, VPN app, and whether a profile is managed by an administrator.
Which settings should you enable?
| Your priority or need | Recommended choice | Trade-off |
|---|---|---|
| Keep traffic from leaving outside the VPN if the connection drops | Enable the kill switch or system block-without-VPN option, if supported. | Internet access may stop until the VPN reconnects or the block is disabled. |
| Have the VPN reconnect without opening the app | Enable the available automatic or always-on connection option. | Trigger behavior and availability differ by platform and app. |
| Use a particular app, destination, or route outside the VPN | Configure split tunneling narrowly for that exception. | Bypassed traffic uses the ordinary connection, not the VPN tunnel. |
| No specific need to bypass the VPN | Leave split tunneling off and route traffic through the VPN. | Some services or network setups may require an exception; add one only if needed. |
Before enabling a kill switch and split tunneling together, check that your VPN client supports that combination on your operating system. Proton VPN, for example, says the features conflict on most of its supported platforms, with Windows as an exception. That is provider-specific guidance, not a rule for every VPN: Proton VPN’s compatibility information.
Rank #2
- 【AC1200 Dual-band Wireless Router】Simultaneous dual-band with wireless speed up to 300 Mbps (2.4GHz) + 867 Mbps (5GHz). 2.4GHz band can handles some simple tasks like emails or web browsing while bandwidth intensive tasks such as gaming or 4K video streaming can be handled by the 5GHz band.*Speed tests are conducted on a local network. Real-world speeds may differ depending on your network configuration.*
- 【Easy Setup】Please refer to the User Manual and the Unboxing & Setup video guide on Amazon for detailed setup instructions and methods for connecting to the Internet.
- 【Pocket-friendly】Lightweight design(145g) which designed for your next trip or adventure. Alongside its portable, compact design makes it easy to take with you on the go.
- 【Full Gigabit Ports】Gigabit Wireless Internet Router with 2 Gigabit LAN ports and 1 Gigabit WAN ports, ideal for lots of internet plan and allow you to connect your wired devices directly.
- 【Keep your Internet Safe】IPv6 supported. OpenVPN & WireGuard pre-installed, compatible with 30+ VPN service providers. Cloudflare encryption supported to protect the privacy.
How the choices differ by platform
Android
Google says always-on VPN is available on Android 7.0 or higher. Android’s system-level “Block connections without VPN” setting can prevent connections outside the VPN, and VPN configurations can use app allow or disallow lists. With an allow list, apps not included may lose network access when blocking is enabled; with a disallow list, excluded apps may lose network access because they cannot use the VPN but are also blocked from using the ordinary connection. Menu names and availability vary by manufacturer, OS version, and VPN app. Google’s consumer instructions also note that an app-configured VPN may not expose the system always-on option. See Android Enterprise Help and Google’s Android VPN connection guide.
Apple devices
Apple documents VPN On Demand for iOS, iPadOS, macOS, tvOS, and visionOS; it can establish a connection based on rules in a configuration profile. On Demand requires authentication without user interaction, so setup may differ from a consumer VPN app’s own auto-connect switch. Apple also documents per-app VPN for iOS, iPadOS, macOS, visionOS, and supervised watchOS. See Apple’s VPN deployment overview.
Rank #3
- New-Gen WiFi Standard – WiFi 6(802.11ax) standard supporting MU-MIMO and OFDMA technology for better efficiency and throughput.Antenna : External antenna x 4. Processor : Dual-core (4 VPE). Power Supply : AC Input : 110V~240V(50~60Hz), DC Output : 12 V with max. 1.5A current.
- Ultra-fast WiFi Speed – RT-AX1800S supports 1024-QAM for dramatically faster wireless connections
- Increase Capacity and Efficiency – Supporting not only MU-MIMO but also OFDMA technique to efficiently allocate channels, communicate with multiple devices simultaneously
- 5 Gigabit ports – One Gigabit WAN port and four Gigabit LAN ports, 10X faster than 100–Base T Ethernet.
- Commercial-grade Security Anywhere – Protect your home network with AiProtection Classic, powered by Trend Micro. And when away from home, ASUS Instant Guard gives you a one-click secure VPN.
Windows
Microsoft documents VPN profiles for Windows 10 and Windows 11 with application triggers, name-based triggers, and Always On triggers, including sign-in, network change, or device screen-on. These profile features may be provisioned with management tools rather than exposed as switches in a consumer VPN app. Windows split tunneling is route-based: routes specified for the VPN use it, while other traffic goes over the physical interface. See Microsoft’s auto-trigger profile options and VPN routing decisions.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Check these things before relying on the settings
- Confirm the exact behavior of the kill switch: does it block only unexpected drops, or also a deliberate disconnect?
- Confirm whether the VPN reconnects automatically and what triggers connection on your device.
- If you configure split tunneling, verify which apps or routes are inside the tunnel and which use the ordinary connection.
- Check the VPN provider’s compatibility notes for your specific app and operating system before combining split tunneling with a kill switch.
- After changing settings, test the behavior you expect, including what happens to internet access if the tunnel disconnects.
Exact menus and results depend on the device, OS version, VPN provider, and whether the configuration is user-managed or administered through a profile. A provider-reported Android 13 troubleshooting page, for example, describes some devices losing VPN connectivity when switching between Wi-Fi and cellular; the page does not establish how prevalent or current the issue is across devices. See Proton VPN’s Android 13 connection guidance.
Quick Recap
Best Value
- Next-Gen Gigabit Wi-Fi 6 Speeds: 2402 Mbps on 5 GHz and 574 Mbps on 2.4 GHz bands ensure smoother streaming and faster downloads; support VPN server and VPN client¹
- A More Responsive Experience: Enjoy smooth gaming, video streaming, and live feeds simultaneously. OFDMA makes your Wi-Fi stronger by allowing multiple clients to share one band at the same time, cutting latency and jitter.²
- Expanded Wi-Fi Coverage: 4 high-gain external antennas and Beamforming technology combine to extend strong, reliable, Wi-Fi throughout your home.
- Improved Battery Life: Target Wake Time helps your devices to communicate efficiently while consuming less power.
- Improved Cooling Design: No heat ups, no throttles. A larger heat sink and redefined case design cools the WiFi 6 system and enables your network to stay at top speeds in more versatile environments.
Rank #4
- 【DUAL BAND WIFI 7 TRAVEL ROUTER】Products with US, UK, EU, AU Plug; Dual band network with wireless speed 688Mbps (2.4G)+2882Mbps (5G); Dual 2.5G Ethernet Ports (1x WAN and 1x LAN Port); USB 3.0 port.
- 【NETWORK CONTROL WITH TOUCHSCREEN SIMPLICITY】Slate 7’s touchscreen interface lets you scan QR codes for quick Wi-Fi, monitor speed in real time, toggle VPN on/off, and switch providers directly on the display. Color-coded indicators provide instant network status updates for Ethernet, Tethering, Repeater, and Cellular modes, offering a seamless, user-friendly experience.
- 【OpenWrt 23.05 FIRMWARE】The Slate 7 (GL-BE3600) is a high-performance Wi-Fi 7 travel router, built with OpenWrt 23.05 (Kernel 5.4.213) for maximum customization and advanced networking capabilities. With 512MB storage, total customization with open-source freedom and flexible installation of OpenWrt plugins.
- 【VPN CLIENT & SERVER】OpenVPN and WireGuard are pre-installed, compatible with 30+ VPN service providers (active subscription required). Simply log in to your existing VPN account with our portable wifi device, and Slate 7 automatically encrypts all network traffic within the connected network. Max. VPN speed of 100 Mbps (OpenVPN); 540 Mbps (WireGuard). *Speed tests are conducted on a local network. Real-world speeds may differ depending on your network configuration.*
- 【PERFECT PORTABLE WIFI ROUTER FOR TRAVEL】The Slate 7 is an ideal portable internet device perfect for international travel. With its mini size and travel-friendly features, the pocket Wi-Fi router is the perfect companion for travelers in need of a secure internet connectivity on the go in which includes hotels or cruise ships.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →
