
When the OS sees a packet which should go to address "u.v.w.x", it checks whether "u" is "10" if yes, then it gives the packet to the VPN, which does its magic with it and forwards it, under heavy encryption/MAC/whatever to the server otherwise, the packet is emitted "to the Internet" as the OS would have done without the VPN client.ĭetails on how this system is implemented depend on the VPN implementation (e.g.


For instance, let's assume that the VPN client advertises that it should handle all packets meant for 10.0.0.0/8 (i.e. A typical VPN client works like this: it connects to the server, and then it instructs the operating system to give him all packets which are to be sent to any address in a given set.
