In short: an OpenWRT router can hold a VLESS connection on its own — and then every device in the house gets protected access at once, including the TV and set-top boxes where a VPN app cannot be installed. The most convenient way in 2026 is the HomeProxy package (a graphical front end for sing-box): it installs from the repository, the subscription is added as a link, and setup takes 15–20 minutes. You will need a router with OpenWRT 23.05 or newer, 256 MB of RAM and about 30 MB of free space. We go through it step by step, including the configuration-type catch that trips up most people.
Not Comfortable With Routers? Start Here
Honest navigation, so you don’t lose an evening. This guide is for routers that already run OpenWRT; if you are not yet sure what firmware means, there are easier paths with pictures and no risk: on Keenetic and TP-Link the connection is set up in the ordinary web interface in 10 minutes. If you want OpenWRT specifically but without reflashing, get a GL.iNet router: OpenWRT is installed there from the factory, and this guide applies as is. And if you get stuck on any step of any path, Tainet support will walk you through from start to finish: asking is normal.
Who Router-Level Setup Suits
Three scenarios where a router beats an app on every device. First, TVs and set-top boxes: a client often cannot be installed there, while the router hands protected access to them too (alternative routes for a TV are in the Smart TV guide). Second, lots of devices: one setup instead of eight, and guests join the Wi-Fi and are already inside the tunnel. Third, stability: the router holds the connection around the clock, without depending on the background limits phones impose.
The flip side is that setup is harder than a mobile app. If OpenWRT is not on the router yet, installing it is a separate job (check your model on openwrt.org); if your router is an ASUS or a Keenetic on stock firmware, each has its own path: the Keenetic guide, and one for ASUS.
The practical steps are below; if you'd rather skip the setup, Tainet connects in a couple of minutes - through the Telegram bot or in your account.
What You Need
- A router with OpenWRT 23.05+ (or an ImmortalWRT build), at least 256 MB of RAM and about 30 MB of free space — a running HomeProxy takes around 70 MB of memory. Among affordable ready-made options with hardware headroom, GL.iNet routers do well — OpenWRT is installed on them from the factory.
- A subscription with a VLESS configuration. With Tainet you get one when you sign up — in the Telegram bot or on this site in your account, the trial period is free — just enough to verify the setup before paying.
- 20 minutes and access to the router’s web interface (LuCI).
Installing HomeProxy
- Open the router’s web interface → System → Software → Update lists.
- Find and install the luci-app-homeproxy package. If it is missing from the stock repository, the project’s GitHub page has prebuilt versions for each OpenWRT release.
- Refresh the page after installing — a HomeProxy entry appears in the Services menu.
Adding a Tainet Subscription
- Open Services → HomeProxy → the Node Settings tab.
- There are two paths. The quick one: the Subscriptions tab → paste the subscription link → Update — the router pulls the server list itself and keeps it current. The manual one: Nodes → Import share links → paste a server configuration from your account → Import.
- An important catch: the sing-box engine behind HomeProxy does not support XHTTP-type configurations — and a Tainet subscription contains both VLESS and XHTTP variants. To keep the unusable ones out of the way, open the Subscriptions tab, turn on node filtering (Filter nodes → Blacklist mode) and add the keyword xhttp — only VLESS servers remain, and those are the ones the router needs. This is the most common reason for “I set it up and it doesn’t work” on OpenWRT.
- Pick the server with the lowest ping as your Main Node and apply the changes.
Tainet - a stable connection with no complicated setup. Sign up through the Telegram bot or in your account, support is real people, from $0.10 a day.
Try it →Routing Mode and Firewall
In the HomeProxy settings choose Routing Mode → Global — all home traffic goes through the connection. For the proxy mode, Redirect TCP + TProxy UDP is the universal choice; if you pick the Tun variant — one extra step is needed: Network → Firewall → create an interface for the singtun0 device (protocol “unmanaged”) and assign it to the wan zone. Once applied, the service status should turn to RUNNING — check the status tab, which is also where the logs live.
Verification: from any device in the house open an IP-lookup service — the address should be that of the Tainet server.
If Something Doesn’t Work
The service is RUNNING but there is no internet. Check the xhttp filter from the step above — 9 cases out of 10. After that, switch the Main Node to a different server.
The subscription won’t update. A one-off network glitch — refresh it manually in the Subscriptions tab; if it keeps happening, enable the Update via Proxy option.
The connection drops from time to time. Automatic service restarts on failure help (the internet-detector package with the service homeproxy restart command) — and write to support: if the drops are on our side, we fix them by switching servers.
The router runs out of memory. HomeProxy is the leanest of the options with a graphical interface, but 128 MB of RAM is not enough for it. The alternative for weak hardware is a sing-box configuration without a web interface, but that is already “confident with the console” territory.
You need XHTTP or other protocols on the router. Install Passwall2 instead of HomeProxy — it runs on xray-core and supports everything, but it needs more memory and more care in setup. For most needs, HomeProxy + VLESS is enough.
Frequently Asked Questions
Will the internet slow down for the whole house?
The router encrypts traffic with its own processor, and on weak hardware that is the bottleneck. As a benchmark: budget OpenWRT models deliver 30–80 Mbps through the tunnel, which is fine for video and work; for 200+ Mbps plans you need a more capable router. The speed of your particular combination is verified during the free trial period.
Can I send only some devices through the connection?
Yes — HomeProxy supports routing by device and by address, so the TV goes through the tunnel while the work laptop stays direct. That deserves its own walkthrough; the basic modes are described above.
Which router should I buy for this?
The minimum is 256 MB of RAM and OpenWRT 23.05+ support. Comfortable is 512 MB and up. GL.iNet routers save you the reflashing stage. For the general picture, see the guide to VPN-capable devices.
Why is VLESS better for a router than the classic protocols?
Connection stability: VLESS traffic is indistinguishable from ordinary HTTPS. How the protocol works — the VLESS and REALITY breakdown, and how it compares with the rest — an overview of VPN protocols.
One subscription for the router and the phone — is that allowed?
Yes: a Tainet subscription is multi-device — the router covers the house, and the same link in Happ on a phone works everywhere else.
If what you want is "set it up once, works for everyone at home": a Tainet subscription with VLESS servers for routers comes with a free trial period — in the Telegram bot or on this site in your account, from $0.10 a day. Get stuck on any step — support will help with your specific router.
