network-feeds
Network accelerating extensions for OpenWrt (valuable Pull Requests are welcomed)
Components
- ipset-lists: 'ipset' lists with China IP assignments (data from apnic.net)
- minivtun-tools: Fast secure VPN in a custom protocol for rapidly deploying VPN services or getting through firewalls (refer to: https://github.com/rssnsj/minivtun)
- proto-bridge: Protocol-filtered ethernet bridging drivers and a VLAN implementation with compressed VLAN header (YaVLAN)
- file-storage: Toolset for automatically setting up Samba file shares with attached USB storages and SD cards
Build minivtun-tools packages for OpenWrt
# Download and extract an OpenWrt SDK (take MT7621 for example)
wget https://downloads.openwrt.org/releases/21.02.0/targets/ramips/mt7621/openwrt-sdk-21.02.0-ramips-mt7621_gcc-8.4.0_musl.Linux-x86_64.tar.xz
tar axf openwrt-sdk-21.02.0-ramips-mt7621_gcc-8.4.0_musl.Linux-x86_64.tar.xz
cd openwrt-sdk-21.02.0-ramips-mt7621_gcc-8.4.0_musl.Linux-x86_64
# Place the code under 'package' of the SDK directory
cd package
git clone https://github.com/rssnsj/network-feeds.git
cd -
# Install compile dependencies
./script/feeds update
./script/feeds install openssl
make package/openssl/compile V=s -j
# Compile the packages
make package/ipset-lists/compile V=s -j
make package/minivtun-tools/compile V=s -j
# Then the packages 'ipset-lists' and 'minivtun-tools' are ready under 'bin/packages/mipsel_24kc/base/'
Install minivtun-tools for OpenWrt
opkg update
opkg install dnsmasq-full --force-overwrite
opkg install ipset-lists_xxxx.ipk minivtun-tools_xxxx.ipk
Setup for the server
Supposing you've setup a client like this to connect your server:
config minivtun
option server 'xxx.xxx.xxx.xxx'
option server_port '1414'
option password 'Hello'
option algorithm 'rc4'
option local_netmask '255.255.0.0'
option local_ipaddr '10.7.34.34'
Then run the following commands after each system startup of the server:
/usr/sbin/minivtun -l 0.0.0.0:1414 -a 10.7.0.1/24 -e Hello -t rc4 -d
# Setup as a NAT router
sysctl -w net.ipv4.ip_forward=1
iptables -t nat -I POSTROUTING ! -o lo -j MASQUERADE
iptables -I FORWARD -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu