Setup · Router
Set up Fexyn VPN on a Router
Advanced — requires OpenWrt and command-line comfort. This is a pointer, not a full walkthrough.
Before you start
- A Fexyn account. Create one — every plan includes a 7-day free trial.
- Your personal subscription link from Dashboard → Subscription Links.
Prerequisites
A router setup is hands-on and varies a lot between models, so we keep this short on purpose. You'll need:
- A router running OpenWrt (or compatible firmware with xray support).
- SSH access to the router.
- Comfort working on the command line.
If any of those is unfamiliar, the per-device guides (Windows, Android, iOS, macOS, Linux) are a far easier path.
Why set up on a router?
A router connection protects every device on the network at once — phones, smart TVs, game consoles, anything that can't run a VPN app itself. The whole router counts as a single device slot on your plan, no matter how many devices sit behind it.
High-level steps
This is the shape of the job, not a click-by-click walkthrough — the exact commands depend on your router and firmware.
- Get your subscription URL from Dashboard → Subscription Links. It looks like https://applinks.cc/api/sub/●●●●●●●●●●●●●●●●. Treat it like a password — anyone with it can use your connection, so keep it private.
- The link returns a base64-encoded list of vless:// URIs. Decode it, then read one server's parameters: the UUID, server IP, port, public key (pbk), short ID (sid), and SNI.
- Install xray-core on the router (a build that matches the router's CPU architecture).
- Write an xray config.json using those parameters — the outbound is a vless outbound with reality TLS settings.
- Set up transparent routing so LAN traffic flows through xray — typically nftables/iptables TPROXY or a TUN inbound.
- Test connectivity from a device on the network with fexyn.com/tools/what-is-my-ip. The IP shown should be the Fexyn server's. Then run a DNS leak test.
New to VLESS Reality? What is VLESS Reality?
Troubleshooting
- Connection fails — re-copy your subscription link in full from the dashboard (a truncated link breaks the UUID or public key) and try a different server from the decoded list.
- Slow speeds — switch to a server closer to you. Pick a different vless:// entry from the decoded list and update the outbound in your config.
- No traffic at all — the transparent-routing rules are usually the cause. Confirm your TPROXY/TUN setup is forwarding LAN traffic into xray and that you haven't routed the router's own traffic into a loop.
- Handshake works but pages won't load — check that the SNI, public key (pbk), and short ID (sid) in your config exactly match the decoded parameters. A single wrong character in the Reality keys fails silently.
Need help?
Router setups vary too much for one guide to cover every model. If you get stuck, email us at support@fexyn.com with your router model and firmware, and the Fexyn team will help.
Related
Protect every device on your network with one Fexyn account.