Routers
OpenWrt
OpenWrt OpenWrt Jun 14, 2026
Posted Sun, Jun 14, 2026 2:16 PM
Edited Sun, Jun 14, 2026 2:17 PM

How to setup Stealth Proxies on OpenWrt (v2rayA)

This guide was created by a community member and reviewed by us. Firmware and router interfaces may change over time, so some steps may differ depending on your device or version.

Additionally we have alternative sing-box based guide here.

Prerequisites

Setup is being demonstrated on OpenWrt 25.12.4 but the same steps should be applicable to any OpenWrt router running version 23.05 or later. However, for best results using the latest stable release for your router is recommended.

We are going to install all the required packages from the official OpenWrt repository, if you prefer to install the v2rayA package officially maintained by the v2rayA project, please refer to their official installation instructions.
After installing v2rayA, you can skip to step 2 to continue configuring v2rayA for your xeovo account.

1. Install v2rayA LuCI App

  1. Open a web browser and Log in to the OpenWrt LuCI web control panel by entering the IP address of your router. (usually 192.168.1.1)
  2. In the LuCI control panel, from the System menu, select Software.
  3. Click the Update lists... button to get the list of the latest packages from the repository.
  4. In the Filter box enter v2raya to find the desired package.
  5. In the list below, click the Install button in front of the LuCI-app-v2rayA package to install v2rayA LuCI App.
  6. Once the installation succeeds, refresh the page so you can access the newly added Services menu.

2. Enable the v2rayA Service

  1. From the Services menu, select v2rayA
  2. Enable the v2rayA Service by checking the Enable box.
  3. Click Save & Apply button to save the changes.

3. Getting the Latest GeoIP and GeoSite Files

After starting the v2rayA service, v2rayA will try to download the latest GeoIP and GeoSite .dat files from GitHub, to see if the download was successful, switch to the Log tab and wait until you see the line geoip.dat and geosite.dat are ready in the log.
If the download was successful, then you can skip to step 5 to import your proxy configurations in v2rayA.

4. Using GeoIP/GeoSite Packages from OpenWrt's Repository

It's best to let v2rayA manage geoip.dat and geosite.dat files, but if v2rayA fails to download the files, e.g., GitHub is blocked in your country, you can install v2ray-geoip and v2ray-geosite opkg packages from the OpenWrt's repository instead.

  • Users in Iran can install the v2ray-geosite-ir for enhanced Iran specific GeoSite rules.

5. Import Proxy Subscription to v2rayA

  1. Go back to Services -> v2rayA -> Configuration Tab
  2. Click the Open Web Interface button.
  3. Choose a Username and Password for the v2rayA administrator account, make sure you remember the username and password. You'll need these to use the v2rayA web interface next time it asks you to log in.
  4. After logging in for the first time, click the Import button on the Welcome dialog.
  5. In a new tab, navigate to your xeovo control panel at xeovo.com/login, enter your username and password and Log In to your account.
  6. In the side menu, Click on STEALTH PROXY.
  7. Click the Generate New Key button.
  8. Choose one of the Domains from the drop-down menu.
  9. In the LINUX section, Select v2rayA from the menu and click the 🔗 icon to copy the subscription Link.
  10. Switch back to v2rayA tab and paste the link inside the subscription address field or click the In batch button to import subscription links for all the mirrors in batch, one link at a line.
  11. Click on one of the Subscription buttons, for example MIRROR.XEOVO.XYZ to open the subscription page.

6. Connecting to the Most Suitable Server

  1. To find the most suitable server for your location use the checkbox in the table header to select all available configurations.
  2. Click the Ping button to quickly find the nearest servers to your location.
    Or if you are not in a hurry, click the HTTP button to test the connection as well to allow v2rayA to rank the best connections available to you.
  3. To sort the connections by latency, click on the Latency in the connection list header.
  4. Select your desired server by clicking the 🔗 Connect button.
  5. Hover over the Ready button at the top of the screen and click the Start button to start v2rayA.

7. Configure Transparent Proxy and Routing

  1. Transparent Proxy/System Proxy

    • Off:

      In this mode, v2rayA is not set as the router's default proxy, and no traffic goes through the proxy. Choose this option to route specific domains through the proxy, or to exclude specific domains/IP addresses from the proxy.
      To use v2rayA as an HTTP/S/Socks5 proxy server on other devices in your network, you need to enable Port Sharing by clicking the Port Sharing button.

    • On: Do not Split Traffic:

      In this mode, v2rayA acts as the main system proxy and all the router traffic goes through v2rayA.
      Choose this mode if you would like all the network traffic to go through the proxy.

    • On: Traffic Splitting Mode:

      In this mode, you can write custom rules to split traffic based on your RoutingA Rules, choose this option if you would like only certain domains or websites to go through proxy or to exclude some domains and IP addresses.

  2. Transparent Proxy/System Proxy Implementation

    • tproxy (Recommended): This mode supports both UDP and TCP traffic and is the recommended proxy implementation.

    • redirect: This mode only supports TCP traffic. Not Recommended for use on routers.

  3. Traffic Splitting Mode of Rule Port:


    • RoutingA: Choose if you want to write your own RoutingA Rules for traffic splitting.

    • Proxy only GFWList: Choose this option to only proxy blocked websites and IP addresses.

    • Proxy except CN Sites: Choose this option to proxy everything except Chinese websites and IP addresses.

  4. Prevent DNS Spoofing:

    • Prevent DNS Hijack Only (fast): Fastest option, but might not work on heavily censored networks.

    • Forward DNS Request: Choose this option to forward DNS requests through proxy in order to prevent DNS Spoofing.

    • DoH(dns-over-https): Choose this option to forward DNS requests to the DOH server.

    • Advanced Setting (Recommended):
      Choose this option to configure different DNS servers for proxied and non-proxied domains.
      Then you can click the Configure button to set the rules for your desired DNS servers.
      For example, enter the following rules in the "Domain Query Servers" box to use the OpenDNS DOH for direct connections and NextDNS DOH for proxied connections:

https://dns.opendns.com:443/dns-query->direct
https://dns.nextdns.io:443/dns-query->proxy

  1. Special Mode:

    • Off (Recommended)
    • supervisor: Monitors DNS pollution and intercepts in advance, using the sniffing mechanism of v2ray-core to prevent DNS pollution.
    • fakedns: Uses the fakedns strategy to speed up the resolving.

  2. TCPFastOpen:

    • Off (Recommended)

    • On: Simplify TCP handshake process to speed up connection establishment but it could increase the risk of traffic fingerprinting and may cause connection failures.

  3. Multiplex:

    • Off (Recommended)
    • On: Multiplexing TCP connections to reduce the number of handshakes, but it will affect the use cases with high throughput, such as watching videos, downloading, and test speed. It could increase the risk of traffic fingerprinting and only supports VMESS for now.

  4. Automatically Update Subscriptions:

    • Update Subscriptions Regularly (Unit: hour) (Recommended): Update subscriptions periodically every X hour. Enter your desired interval (in hours) in the box below.

    • Update Subscriptions When Service Starts: Only update subscriptions every time v2rayA service starts.

  5. Click Save and Apply to save the settings.

8. Update the GFWLists

  1. Click the Update button on the top of the settings dialog.
  2. Click the Auto Update button to get the latest GFWList file.

9. Optionally Use a Custom GFWList File

You can use alternative .dat files as your GFWList files, for example Iranian users may opt to use the Chocolate4U/Iran-v2ray-rules as their geosite.dat file.
In that case you should:

  1. Enter the link to your desired .dat file in the Custom Download Link, for example for Iran-v2ray-rules you can enter:
https://github.com/chocolate4u/Iran-v2ray-rules
  1. Click the Manual Update button to download the file.
  2. Click the Save and Apply button to save the setting.

10. Optionally Write Your Desired Routing Rules

Now you can use the new GFWList to write your desired routing rules.
For example, if you would like to block ads and allow Iranian websites to bypass the proxy:

  1. Open the Settings dialog.
  2. In the Traffic Splitting Mode of Rule Port section, select RoutingA.
  3. Click Configure to open RoutingA Rules Dialog.
  4. Enter the following rules in the box:
default: proxy
ip(geoip:private)->direct

# Block Ads, Malware, Phishing and Cryptominers
domain(geosite:category-ads-all, security:malware, security:phishing, security:cryptominers)->block

# Allow Iran IP Addresses and Websites to Bypass Proxy
domain(geosite:category-ir)->direct
ip(geoip:ir)->direct
  1. Click Save and then Save and Apply for the new rules to take effect.
0 ⁨0⁩ ⁨comments⁩
Comment You don't have permission to do this. Controls