We recently moved _away_ from split tunneling. It's still giving me headaches. Not just performance, but things like docker containers don't always work right.