Openwrt-Passwall/openwrt-passwall
Openwrt Passwall
OpenWrt-passwall is a network proxy management tool designed for OpenWrt firmware to facilitate internet censorship circumvention. It enables the routing of traffic through proxy servers or VPN tunnels to bypass network blocks and regional restrictions.
The project integrates VPN client functionality directly into the router, allowing all connected devices to secure their traffic without individual software installations. It manages the configuration and switching of various proxy protocols and servers to control how local network traffic exits the gateway.
The system utilizes a Lua-based web interface for management and employs DNS-query diversion to prevent DNS poisoning. Traffic steering is handled through firewall rules and routing tables, while background proxy processes are managed via a daemon-based orchestration model.
Features
- Network Proxy Management - Provides a comprehensive suite for configuring and controlling internet traffic routing through various proxy servers.
- Advanced Traffic Routing - Implements advanced traffic routing logic directly within OpenWrt firmware based on connection metadata.
- Censorship Circumvention Tools - Facilitates the bypassing of regional network blocks and internet censorship via proxy and VPN tunnels.
- DNS Query Routers - Intercepts and routes DNS queries through a proxy to prevent DNS poisoning and censorship.
- Router-Level VPN Integration - Integrates VPN client functionality at the router level to secure all downstream connected devices.
- Firewall Rule Configurations - Uses kernel-level iptables firewall rules to steer network traffic through specific proxy tunnels.
- Proxy Orchestrators - Implements a daemon-based system to manage the lifecycle and automatic restarts of background proxy processes.
- Lua-Based Administration Interfaces - Provides a dynamic Lua-based web interface for configuring proxy rules and VPN settings.
