I tried to use the Omada VPN feature (WireGuard) to route only specific applications (such as Imo) through the VPN tunnel, while keeping all other traffic on the ISP directly.

Here’s what I observed:

When I configure AllowedIPs = 0.0.0.0/0, all traffic goes through the VPN tunnel. It works, but this is not what I want since it forces all traffic over the VPN.

When I configure only specific subnets (e.g., known IP ranges for Imo servers), the tunnel stays connected, but the application (Imo) doesn’t work.

I also tried Policy Routing with Port Groups to send only Imo traffic through the VPN, but the results are the same: either all traffic goes through the VPN, or all traffic stays on the ISP.

My questions:

Does Omada Controller currently support proper split tunneling (so only certain apps/ports/IPs go through the VPN)?

Is it possible to configure domain or DNS-based policy routing (e.g., *.imo.im) on Omada?