nikkinikki-org/OpenWrt-nikki
OpenWrt Nikki
OpenWrt-nikki is an OpenWrt proxy client and transparent proxy gateway that manages network traffic diversion through remote servers. It functions as a network access controller and DNS hijacking server, intercepting IPv4 and IPv6 traffic to route it through a proxy without requiring client-side configuration.
The project features a proxy subscription manager that automates the downloading and refreshing of remote configuration profiles using custom user agents. It employs a mixin-based configuration system to inject custom rules or proxy nodes into existing profiles without overwriting source files.
Network management capabilities include fake-IP DNS hijacking to map domains to proxy targets and firewall-based traffic filtering using IP, MAC, and port-level rules. The system also provides scheduled service automation for periodic restarts and subscription updates via cron expressions.
Diagnostic tools allow for viewing and exporting system logs, while network optimization settings include TCP keep-alive tuning to reduce battery drain on mobile devices.
Features
- Transparent Network Proxies - Intercepts network traffic at the router level to automatically route packets through a proxy without client-side configuration.
- OpenWrt Proxy Management - Provides a proxy client and transparent gateway specifically for OpenWrt routers to route network traffic.
- Internal DNS Resolvers - Operates an integrated DNS resolver that intercepts queries to manage routing and fake-IP assignments.
- DNS Override Resolvers - Functions as a DNS override resolver that intercepts queries to provide fake-IPs for optimized routing.
- Fake-IP DNS Hijacking - Intercepts DNS queries and returns synthetic IP addresses to map domains to proxy targets for traffic interception.
- Proxy Clients - Provides a network routing tool for OpenWrt that manages proxy subscriptions and traffic diversion.
- Proxy Subscription Automation - Automatically updates proxy subscriptions on a predefined timetable by triggering service restarts via cron expressions.
- Proxy Subscription Managers - Synchronizes and updates remote proxy server subscription lists from external providers automatically.
- Transparent Proxies - Intercepts IPv4 and IPv6 network traffic at the network layer to route it through a proxy without client configuration.
- Network Access Control - Provides network-level traffic filtering and access policy enforcement to regulate which devices use the proxy service.
- Configuration Merging - Combines static configuration files with dynamic mixin overrides to inject custom rules without altering source files.
- Device-Based Access Controls - Restricts or permits proxy access based on device IP, MAC address, or user group for local traffic.
- Fake-IP Filters - Employs blacklists to prevent specific domains or regions from using fake IP addresses, returning real IPs instead.
- Proxy Configuration Profiles - Manages and edits sets of network proxy configuration profiles using mixins to customize routing behavior.
- Rule Injection - Enables injecting custom rules or proxy nodes into existing configuration files through a mix-in system.
- Traffic Filters - Implements firewall-based traffic filtering using IP, MAC, and port-level rules to control proxy bypass.
- Port-Based Filters - Bypasses the proxy for specific target ports to ensure certain network traffic remains direct.
- Selective Traffic Routing - Routes network traffic selectively by bypassing the proxy for specific IP ranges and firewall marks.
