How to set up a VPN on a router: Keenetic, OpenWrt and others in 2026
A router VPN covers every device at home, including the TV. Which routers fit, why built-in OpenVPN and WireGuard often fail in Russia, and how to run VLESS on Keenetic and OpenWrt.
Quick fix. A router needs a VLESS subscription. Get one from Surok in Telegram: 3 days free.
Why the built-in VPN fails: routers ship OpenVPN, WireGuard, L2TP and IPsec, which are detected and cut in Russia. VLESS works but needs extra software.
Keenetic: VLESS is run through the XKeen utility (Xray on the router, routing chosen devices). You need a Keenetic with OPKG/Entware support (ARM/aarch64 models are best), Entware installed, then XKeen from its official GitHub page with your server config. It's for confident users.
OpenWrt: ready packages for Xray and sing-box plus add-ons for selective routing.
Must-haves: local sites direct, only the devices that need it through the VPN, and a router with enough CPU — cheap ones cap VPN speed at 20–50 Mbps. Simpler alternatives: an app per device, or an Android TV box — see VPN on Samsung and LG TVs.