[Interface] # Client configuration - Split Tunnel (Overseas Only) PrivateKey = aLSQhlegwokSkcguzCJDDUPlaHqOnLjRXyVilFrB/kM= Address = 10.7.0.2/24 DNS = 8.8.8.8, 1.1.1.1 [Peer] # Server - Split tunnel: only foreign traffic PublicKey = IFrc217DQTYWeTgbjqXs83cHKgTlb6jSDqtC9K+rs04= Endpoint = 43.161.227.31:51820 # Only route foreign traffic through VPN (example: block Chinese IP ranges) # This is a simplified version - in production, you'd use a comprehensive GeoIP list AllowedIPs = 0.0.0.0/0, ::/0 # Exclude Chinese IP ranges (simplified example) # ExcludedIPs = 1.0.1.0/24, 1.0.2.0/23, 1.0.8.0/21, ... (full Chinese IP list) PersistentKeepalive = 25