network-feeds

Network accelerating extensions for OpenWrt (valuable Pull Requests are welcomed)

Components

• ipset-lists: 'ipset' lists with China IP assignments (data from apnic.net)
• minivtun-tools: Fast secure VPN in a custom protocol for rapidly deploying VPN services or getting through firewalls (refer to: https://github.com/rssnsj/minivtun)
• proto-bridge: Protocol-filtered ethernet bridging drivers and a VLAN implementation with compressed VLAN header (YaVLAN)
• file-storage: Toolset for automatically setting up Samba file shares with attached USB storages and SD cards

Build minivtun-tools packages for OpenWrt

# Download and extract an OpenWrt SDK (take MT7621 for example)
wget https://downloads.openwrt.org/releases/21.02.0/targets/ramips/mt7621/openwrt-sdk-21.02.0-ramips-mt7621_gcc-8.4.0_musl.Linux-x86_64.tar.xz
tar axf openwrt-sdk-21.02.0-ramips-mt7621_gcc-8.4.0_musl.Linux-x86_64.tar.xz
cd openwrt-sdk-21.02.0-ramips-mt7621_gcc-8.4.0_musl.Linux-x86_64

# Place the code under 'package' of the SDK directory
cd package
git clone https://github.com/rssnsj/network-feeds.git
cd -

# Install compile dependencies
./script/feeds update
./script/feeds install openssl
make package/openssl/compile V=s -j

# Compile the packages
make package/ipset-lists/compile V=s -j
make package/minivtun-tools/compile V=s -j

# Then the packages 'ipset-lists' and 'minivtun-tools' are ready under 'bin/packages/mipsel_24kc/base/'

Install minivtun-tools for OpenWrt

opkg update
opkg install dnsmasq-full --force-overwrite
opkg install ipset-lists_xxxx.ipk minivtun-tools_xxxx.ipk

Setup for the server

Supposing you've setup a client like this to connect your server:

config minivtun
    option server 'xxx.xxx.xxx.xxx'
    option server_port '1414'
    option password 'Hello'
    option algorithm 'rc4'
    option local_netmask '255.255.0.0'
    option local_ipaddr '10.7.34.34'

Then run the following commands after each system startup of the server:

/usr/sbin/minivtun -l 0.0.0.0:1414 -a 10.7.0.1/24 -e Hello -t rc4 -d

# Setup as a NAT router
sysctl -w net.ipv4.ip_forward=1
iptables -t nat -I POSTROUTING ! -o lo -j MASQUERADE
iptables -I FORWARD -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu