Abstract: An example endpoint device includes one or more processors configured to allocate a range of IP addresses to use for fully qualified domain name (FQDN)-based tunnel splitting; send a DNS query to a DNS server; receive a DNS response from the DNS server; modify a first IP address in the DNS response to one of the allocated IP addresses; associate the first IP address and the one of the allocated IP addresses in a data table; change a destination address that corresponds to the one of the allocated IP addresses in a first TCP packet received from a user application to be the first IP address; and in response to receiving, from a gateway, a second TCP packet with a source address that corresponds to the first IP address, change a source address in a second TCP packet to be the one of the allocated IP addresses.