# VPN issue with Amazon Prime Video on Brume 2 **URL:** \ **Category:** VPN, DNS, Leaks\ **Created:** [October 17, 2025, 12:25pm UTC](https://forum.gl-inet.com/t/vpn-issue-with-amazon-prime-video-on-brume-2/64809 "2025-10-17T12:25:38Z")\ **Posts on this page:** 13\ **Page:** 1
**Author:** ![Spoon](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/spoon/32/27821_2.png) [@Spoon](https://forum.gl-inet.com/u/Spoon)\ **Post date:** [October 17, 2025, 12:25pm UTC](https://forum.gl-inet.com/t/vpn-issue-with-amazon-prime-video-on-brume-2/64809/1 "2025-10-17T12:25:38Z")
Hi, There’s something I don’t quite understand. At my parents’ place, I set up a Brume 2 behind their ISP’s modem/router. I activated the **partial Drop-in Gateway** and configured my **Amazon Fire TV Stick** to route its traffic through the Brume 2 gateway. On the Fire TV, I use an **IPTV app (Tivimate)** along with **Netflix** and **Prime Video**. On the Brume 2, I enabled **NordVPN** , but only for a specific list of URLs used by the IPTV service. However, when I launch **Prime Video** , I get a message saying that a VPN is detected and I must disable it. If I turn off the VPN on the Brume 2, the message disappears. What I don’t understand is why Prime Video detects a VPN connection even though the VPN should only apply to a limited set of URLs (used by IPTV). Thank you in advance for your help. ---
**Author:** ![j2zero](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/j/7ea924/32.png) [@j2zero](https://forum.gl-inet.com/u/j2zero)\ **Post date:** [October 17, 2025, 1:39pm UTC](https://forum.gl-inet.com/t/vpn-issue-with-amazon-prime-video-on-brume-2/64809/2 "2025-10-17T13:39:28Z")
Because not all domains come from Amazon so you would need to exclude every single domain that is being served. The VPN providers also have assigned IPs that can be flagged by Amazon and other streaming services that they are indeed VPN IPs. On the Fire TV you should be able to install the Nord VPN app directly and then do what's called split tunneling. This will then allow you bypass the VPN for Amazon etc. As you have found out, trying to “split tunnel” via domain isn't easy, the only way to achieve what you are doing is to keep turning the VPN off when you want to access the features unless you go the app installation route. Check this thread too where I also explain > [@FLINT 2 & VPN, NETFLIX, IPTV with SMASUNG TV](https://forum.gl-inet.com/t/flint-2-vpn-netflix-iptv-with-smasung-tv/56681): > > Hello everyone, I have a FLINT 2 router which is installed in ROUTER mode behind my ISP box (Bouygues Telecom) which is used as a MODEM. The connection between the MODEM and the router is via ethernet cable (modem output to router WAN input). On the FLINT 2 I installed the VPN configuration file SURFSHARK for a ROUTER configuration. I tried WIREGARD and OPENP VPN with a location in Belgium and France. I have a 2024 SAMSUNG TV with the TIZEN OS (it's not ANDROID TV). I have installed the app… ---
**Author:** ![Spoon](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/spoon/32/27821_2.png) [@Spoon](https://forum.gl-inet.com/u/Spoon)\ **Post date:** [October 17, 2025, 3:19pm UTC](https://forum.gl-inet.com/t/vpn-issue-with-amazon-prime-video-on-brume-2/64809/3 "2025-10-17T15:19:23Z")
Hi, But i’m not using the “exclude” domains mode but the “include” domain mode. As I said, only 10 domains which are for sure not use by Amazon should use the VPN ---
**Author:** ![j2zero](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/j/7ea924/32.png) [@j2zero](https://forum.gl-inet.com/u/j2zero)\ **Post date:** [October 17, 2025, 6:01pm UTC](https://forum.gl-inet.com/t/vpn-issue-with-amazon-prime-video-on-brume-2/64809/4 "2025-10-17T18:01:22Z")
Ah okay, so you are saying you have it set to only route traffic to the VPN for the domains you have entered and none of the domains are related to Amazon? Therefore Amazon shouldn't be going via the VPN and being detected as on the VPN? @bruce might be able to help here. ---
**Author:** ![bruce](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/bruce/32/35649_2.png) [@bruce](https://forum.gl-inet.com/u/bruce)\ **Post date:** [October 22, 2025, 3:27am UTC](https://forum.gl-inet.com/t/vpn-issue-with-amazon-prime-video-on-brume-2/64809/5 "2025-10-22T03:27:49Z")
Hello， Please try to upgrade MT2500 to v4.8.2 (beta) firmware first, and configure the VPN policy (domain list) again > **[GL.iNet download center](https://dl.gl-inet.com/router/mt2500/beta)** ---
**Author:** ![xize11](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/xize11/32/5340_2.png) [@xize11](https://forum.gl-inet.com/u/xize11)\ **Post date:** [October 22, 2025, 3:43am UTC](https://forum.gl-inet.com/t/vpn-issue-with-amazon-prime-video-on-brume-2/64809/6 "2025-10-22T03:43:56Z")
well first try what @bruce says. There are also a few other things which you can verify being the cause: - the dns of the vpn is still used instead of the wan dns, I have seen this on multiple gl firmwares and also suggested for a fix, but they didn't agree with me, you can use a dhcp tag with dhcp options to override the dns, if this issue is still present, I had this with isps iptv very annoying this can be. - since you choose a specific domain list to only route over vpn, maybe one of these sites also host on ip space of amazon aws, the problem with these clouds/cdns is that they keep rotating their ips, which mean vice versa such rotated ip can also be involved in your amazon prime stream and actually the traffic has the firewall mark to follow vpn, vpn policies often decrease the anonmimity of your tunnels and vice versa, this is not so easy to verify but I know they rotate atleast every 15 minutes ---
**Author:** ![Renato](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/r/858c86/32.png) [@Renato](https://forum.gl-inet.com/u/Renato)\ **Post date:** [October 22, 2025, 4:43am UTC](https://forum.gl-inet.com/t/vpn-issue-with-amazon-prime-video-on-brume-2/64809/7 "2025-10-22T04:43:18Z")
> [@xize11](#): > > the dns of the vpn is still used instead of the wan dns, I have seen this on multiple gl firmwares and also suggested for a fix, but they didn't agree with me I totally agree with you. If the VPN is enabled, the client must use the DNS form the VPN. If the VPN is by-passed, the client must use the DNS from WAN (or AdGuard) ---
**Author:** ![bruce](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/bruce/32/35649_2.png) [@bruce](https://forum.gl-inet.com/u/bruce)\ **Post date:** [October 22, 2025, 6:28am UTC](https://forum.gl-inet.com/t/vpn-issue-with-amazon-prime-video-on-brume-2/64809/8 "2025-10-22T06:28:52Z")
Yes, firmware prior to v4.8 is always used the DNS from VPN. The v4.8 firmware has been improved this situation, depending on the VPN policy, to use the WAN DNS or VPN DNS. ---
**Author:** ![Spoon](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/spoon/32/27821_2.png) [@Spoon](https://forum.gl-inet.com/u/Spoon)\ **Post date:** [October 22, 2025, 6:33am UTC](https://forum.gl-inet.com/t/vpn-issue-with-amazon-prime-video-on-brume-2/64809/9 "2025-10-22T06:33:36Z")
Ok, thank you, I will try this week end. ---
**Author:** ![j2zero](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/j/7ea924/32.png) [@j2zero](https://forum.gl-inet.com/u/j2zero)\ **Post date:** [October 22, 2025, 10:20pm UTC](https://forum.gl-inet.com/t/vpn-issue-with-amazon-prime-video-on-brume-2/64809/10 "2025-10-22T22:20:01Z")
I had this too. Why would I want my wan clients using the VPN DNS? This can cause detections like @xize11 said. Also if the DNS server is further away then that would also add slight latency too, I don't want to split my DNS. My WAN clients shouldn't even see any VPN DNS when using policy based routing. I have a command that was sent to me that I ran to make the DNS work how i believe it should be (on v4.7.x and older firmware), VPN DNS and WAN DNS depending on what clients is behind the VPN or WAN, it also makes my VPN clients bypass adguard home to achieve what I needed. I have noted that Bruce mentions the logic has been improved but I have yet to try the newer firmware ---
**Author:** ![bruce](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/bruce/32/35649_2.png) [@bruce](https://forum.gl-inet.com/u/bruce)\ **Post date:** [October 31, 2025, 2:03am UTC](https://forum.gl-inet.com/t/vpn-issue-with-amazon-prime-video-on-brume-2/64809/12 "2025-10-31T02:03:25Z")
Hello, Which post needs to delete? No.10 (and 11)? ---
**Author:** ![j2zero](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/j/7ea924/32.png) [@j2zero](https://forum.gl-inet.com/u/j2zero)\ **Post date:** [October 31, 2025, 7:01am UTC](https://forum.gl-inet.com/t/vpn-issue-with-amazon-prime-video-on-brume-2/64809/13 "2025-10-31T07:01:09Z")
Literally just the post I edited to say “Mods please delete this post.” and if you are going to do that then you might as well delete this too 😉 ---
**Author:** ![will.qiu](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/w/b38774/32.png) [@will.qiu](https://forum.gl-inet.com/u/will.qiu)\ **Post date:** [August 13, 2026, 9:30am UTC](https://forum.gl-inet.com/t/vpn-issue-with-amazon-prime-video-on-brume-2/64809/14 "2026-08-13T09:30:33Z")