Routers
Asus Asus Jun 16, 2026
Posted Tue, Jun 16, 2026 7:09 PM
Edited Tue, Jun 16, 2026 7:19 PM

How to setup Stealth Proxies on AsusWrt-Merlin

This guide was created by a community member and reviewed by us. Firmware and router interfaces may change over time, so some steps may differ depending on your device or version.

Requirements

  1. Asuswrt-Merlin 384.15+ or 3006.102.1+
  2. SSH access enabled on the router
  3. A USB flash drive for Entware storage
  4. Entware installed via amtm
  5. JFFS custom scripts enabled (set it in the MerlinWRT settings)

Router Preparation

  1. Log in to the router's admin panel using the default address: 192.168.1.1 or asusrouter.com.
  2. Go to Administration, open the System tab.
  3. In the "Basic Config" section, set "Enable JFFS custom scripts and configs" to "Yes".
  4. In the "Service" section, set "Enable SSH" to "LAN only".
  5. Scroll down and click "Apply".

Flash Drive Preparation

  1. Insert the USB flash drive into the router.
  2. Connect to the router via SSH using a terminal or PuTTY.
  3. Enter the command: amtm.
  4. To prepare the flash drive, format it to ext4 using the fd command. Follow the on-screen prompts and use the recommended values.
  5. After that, your router will reboot.

Install Entware with amtm

  1. Connect to the router via SSH using a terminal or PuTTY.
  2. Enter the command: ep and follow the on-screen instructions.

Install XrayUI

  1. Open a new terminal window or PuTTY and connect via SSH.
  2. Run the following command:
wget -O /tmp/asuswrt-merlin-xrayui.tar.gz https://github.com/DanielLavrushin/asuswrt-merlin-xrayui/releases/latest/download/asuswrt-merlin-xrayui.tar.gz \
&& rm -rf /jffs/addons/xrayui \
&& tar -xzf /tmp/asuswrt-merlin-xrayui.tar.gz -C /jffs/addons \
&& mv /jffs/addons/xrayui/xrayui /jffs/scripts/xrayui \
&& chmod 0777 /jffs/scripts/xrayui \
&& sh /jffs/scripts/xrayui install
  1. Wait for the installation to complete, then log out of the router UI and log back in.

Stealth Proxy Setup

  1. Log in to the router admin panel using the default address: 192.168.1.1 or asusrouter.com.
  2. Go to the VPN section and open the X-RAY tab.
  3. Generate a proxy key using the stealth proxy generator and wait for the process to complete.
  4. In the Linux line, select v2rayA and click Copy link.
  5. Go to "General Options".
  6. Open the "Subscriptions" tab, and paste the copied link into the "Subscription source" field.
  7. Set Auto-refresh Subscriptions to every 12 hours.
  8. Click "Fetch".
  9. In the "Inbounds" section, select dokodemo-door from the dropdown menu. In the window that appears, enter any available port in the Listening Port field. Enable Follow redirect. In the Network section, select TCP,UDP from the dropdown list, then click Save.
  10. In the Outbounds section, select "Create new" and choose a stealth proxy protocol (in this example, VLESS).
  11. In Available Subscription Configuration, select a server provided by Xeovo (example: NO/Vless (WS+TLS)) and click Save.
  12. At the bottom, click Apply.
  13. To verify the connection, visit DoesMyVPN.work.

How to Disconnect

In the Configuration section, next to Connection status, click Stop.

You can learn more about the AsusWrt-Merlin XrayUI project here.