Ignore incoming connections when they reach the VPN path.
Ignore incoming connections when they reach the VPN path.
The VPN client automatically restricts incoming connections, such as by adjusting firewall settings. You should check the client's configuration to find an option for exceptions. For safety, VPN software usually blocks all non-essential traffic since it's believed you're accessing a secured network, like a company system. This ensures no data escapes unintended channels.
It seems the purpose of using a VPN is undermined by finding ways around it.
Consider using VLANs for this setup. Keep standard LAN traffic untagged and disable interface metrics. Build a second interface tagged with VLAN 1 (or higher) and assign it a metric of 1 or more. Launch your Minecraft server on the VLAN1 interface. Configure two router interfaces: one with VLAN tagging for routing via WAN, and another untagged for VPN access. That should get you running smoothly.
I'd thought about doing that, but it leaves things like discord and Spotify exposed, I just feel like there is a better way.
The purpose of a VPN is to secure your internet activity, but here you're focusing on safeguarding only specific parts of your online traffic. Keeping non-browsing data separate from the WAN ensures it remains encrypted even if the VPN connection is compromised.
You're operating in a subpar setting, which means you'll receive suboptimal results.