Distribute OVPN through the program

[Man]

1. You need a Keenetic to work. In principle, any will do, but I would recommend starting with a Keenetic Speedster. But I repeat, any Keenetic ROUTER will do. The starter has little RAM, a weak processor, it can lag with a large number of socks and configs
2. It is better to connect our kinetic to the main router via ethernet, but you can also use Wi-Fi. I think you can figure out how to connect the router yourself, there is plenty of information on the Internet. In a nutshell - we connect the WAN port of our kinetic to the ethernet port (not WAN) of our main router. That's it, the kinetic sap will pick up the IP via dchp.

So let's go then.

We fly into the settings of our kinetic 192.168.1.1 and see the login form, or the setup wizard. It is better to just click some button to exit the setup wizard, because we are interested in something else.

First of all, we go to the system settings and check that all the necessary components are installed. (Left column->Management->system settings. In the window that opens, immediately at the top, click "Component settings" or something like that

We check the following components. If not installed, we install them:

1. Proxy Client
2. PPTP Client (PPTP Клиент)
3. OpenVPN Client and Server (OpenVPN client and server)
4. Wireguard VPN (if needed)
5. DNS-over-TLS proxy

Have you set everything? You're awesome. Let's continue!

First, we create a network segment that will distribute our connection.

Actually, for now we just create a segment, turn on Wi-Fi, enter the full name of our Wi-Fi network, set a password and save.

Next, we create a connection. I will do Socks5.

Go to the sidebar->Internet->Other connections. Below in the "Proxy Connections" section, click "Create Connection"

Check the box "Use the Internet to connect"

Select the protocol type Socks5. Insert settings, authentication if necessary (usually necessary), etc.

Click create. Wait a bit. Connection appears.

A dick like this appears above our socks5

We need to use DNS over TLS. Go here

Next, click DNS configuration

Click "Add server". Select the DNS-over-TLS protocol. Specify the address: port 8.8.8.8:853
Select our connection (In this case, SOCKS5 test)

You can select Any Interface and play around with this setting so you don't have to constantly create a rule for each sock.

That's it, the yellow exclamation mark above our sock is gone. Next, we go to the connection policy.

Creating a policy for our sock

Find our Sock in the list, click the check mark on it and drag it to the very top. Save.

Next, we return to our segment that we created at the very beginning. Scroll almost to the very bottom and select our connection policy

Save. That's it, let's try to connect to Wi-Fi and check if everything is good. Everything should be good.

With OpenVPN and PPTP the procedure is similar. The only thing is that you don't need to create a DNS processing rule every time. We connect DNS-over-TLS for OVPN and PPTP when our config is crap and DNS is leaking.

A huge request. Don't write to me in private messages like "How do I log into the router?" etc. I'm not a setup wizard. I just gave you info on how to distribute a sock and a VPN. All other problems with your router can be solved by searching for a solution on Google.

Now the FAQ:

1. Is it possible to use one connection policy? Just turning on and off the necessary socks/configs? Yes, it is possible. But you will get confused and freak out. It is better to create a separate policy for each connection.
2. OpenVPN config does not connect. Gives an error. What to do? Usually, contacting the config seller and providing him with the log helps. The log can be taken from "Management->Diagnostics->System log". Also, kinetic does not like the parameter "setenv opt block-outside-dns". Delete it to hell.
   Well, in general, you can read in the log what exactly kinetic does not like in the config.
3. How many segments can I make on one kinetic? 4 Wi-Fi. More wired.

In general, that's it. Cheap and cheerful. We stayed within the budget of no more than 100 bucks and are happy