I am trying to understand how NordVPN works, from the IP side of things.
After establishing a VPN tunnel, my public IP address becomes :
$ dig +short myip.opendns.com @resolver1.opendns.com 188.8.131.52
And the following new routes are created :
0.0.0.0/1 via 10.8.3.7 dev tun0 184.108.40.206/1 via 10.8.3.7 dev tun0 10.8.3.0/24 dev tun0 proto kernel scope link src 10.8.3.7 220.127.116.11 via 192.168.1.1 dev wlp2s0
I understand all but the last one (
18.104.22.168 via 192.168.1.1 dev wlp2s0). It seems NordVPN needs to reach directly (e.g., without going through the tunnel) a public IP address (
22.214.171.124) from the same range as the public IP I received (
What's the purpose of this route ?