How to let traffic bypass VPN?

Question

Computer networks

Good day.
There is a regular Internet connection through a rotary.

Ethernet adapter Подключение по локальной сети:

   DNS-суффикс подключения . . . . . :
   IPv4-адрес. . . . . . . . . . . . : 192.168.1.102
   Маска подсети . . . . . . . . . . : 255.255.255.0
   Основной шлюз. . . . . . . . . : 192.168.1.1

Next, I set up a VPN connection through OpenVPN and all traffic goes through this VPN.

Ethernet adapter Подключение по локальной сети 2:

   DNS-суффикс подключения . . . . . :
   IPv4-адрес. . . . . . . . . . . . : 10.2.21.78
   Маска подсети . . . . . . . . . . : 255.255.255.0
   Основной шлюз. . . . . . . . . :

The routes are as follows:

Активные маршруты:
Сетевой адрес           Маска сети      Адрес шлюза       Интерфейс  Метрика
          0.0.0.0          0.0.0.0      192.168.1.1    192.168.1.102     20
          0.0.0.0        128.0.0.0        10.2.21.1       10.2.21.78     30
        10.2.21.0    255.255.255.0         On-link        10.2.21.78    286
       10.2.21.78  255.255.255.255         On-link        10.2.21.78    286
      10.2.21.255  255.255.255.255         On-link        10.2.21.78    286
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
        128.0.0.0        128.0.0.0        10.2.21.1       10.2.21.78     30
      192.168.1.0    255.255.255.0         On-link     192.168.1.102    276
    192.168.1.102  255.255.255.255         On-link     192.168.1.102    276
    192.168.1.255  255.255.255.255         On-link     192.168.1.102    276
      209.99.9.21  255.255.255.255      192.168.1.1    192.168.1.102     20
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link     192.168.1.102    276
        224.0.0.0        240.0.0.0         On-link        10.2.21.78    286
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
  255.255.255.255  255.255.255.255         On-link     192.168.1.102    276
  255.255.255.255  255.255.255.255         On-link        10.2.21.78    286

Question. How can I allow traffic for individual applications to bypass the VPN network? That is, directly, as it usually happens when the VPN network is not connected.

Answer 1

For individual applications, this will be difficult to do.
Routing operates at the network (3) OSI layer, not the application layer (7).
But usually this problem is solved like this:

• in the OpenVPN client, remove the creation of the default gateway through the remote network
  
• through route add, configure routing to those hosts / subnets on the remote network that your applications need.