Home Soft Router: The Secret Weapon for Remote Internet Access
Why Choose a Software Router for Remote Proxy?
For users who frequently need to access the internet securely, installing various VPNs or proxy software isn’t the best solution—especially when using non-personal devices, where privacy and security are difficult to guarantee. However, by running a server at home OpenWRT 或 iStoreOS For the system's software router, we can Passwall Plugin advanced features such as Node Load Balancing, HAProxy Intelligent Traffic Distribution, making it easy to set up a remote proxy.
Key Technologies: SOCKS Proxy + SwitchySharp
After configuring Passwall, you can enable Socks Proxy, and then use a browser extension SwitchySharp...allowing remote devices to use the home's VPN service without having to install any additional software. This approach offers the following advantages:
- Safe and Private: All traffic is routed through your home router, preventing monitoring by third-party software and reducing the risk of data leaks.
- No need to install additional software: Ideal for temporary internet access at the office, on public computers, or on mobile phones—no system settings need to be changed.
- Intelligent Traffic Diversion: Combination HAProxy... It can automatically switch proxies as needed to optimize access speed and stability.
Using the version equipped with OpenWRT 或 iStoreOS For the system's software router, we can use plugins Passwall Implement remote proxy functionality. The new version of the Passwall plugin not only supports multi-node load balancing but also offers powerful HAProxy Intelligent Traffic DiversionThis feature allows traffic to automatically select the best node based on predefined rules.
How can I access the internet from abroad?
The key is to configure the soft router's Socks Proxy Make it accessible from the external network, and use a browser extension in conjunction with it SwitchySharp...you can configure proxy rules on external network devices to enable remote access. The entire process requires no VPN software installation or system proxy configuration, making it flexible and simple to use.
Why is it worth a try?
- Seamless Experience: Switch proxies with a single click in your browser and enjoy a seamless experience.
- Privacy Protection: Avoid installing third-party software on untrusted devices to keep your data more secure.
- Smart Management: Passwall supports policy-based traffic routing, IP rules, and server switching, offering a user experience on par with professional proxy services.
- Suitable for a variety of scenarios: Whether you're at the office, on campus, at a coffee shop, or even traveling abroad, you can quickly connect to your home network.
Summary
For users with soft router devices, this remote proxy solution is not only cost-effective but also highly practical. Whether you’re occasionally traveling for business or frequently working remotely, it can serve as an essential tool for stable internet access. If you’re looking for a more secure and stable way to access the internet, why not give this method a try?
Detailed blog post by the original author:https://kejilaowang.com/openwrt-passwall-haproxy-setup/
Related Reading:
A Comparison of Three Remote Access Methods
| Method | Advantages | Restrictions |
|---|---|---|
| Setting Up Your Own WireGuard Server | High Performance, Customizable Configuration | A public IP address or a forwardable port is typically required. |
| Tailscale-style Networking | Bypasses CGNAT; easy to deploy | Client-Side and Coordination Services |
| Direct Port Mapping | Intuitive Configuration | Exposes the attack surface; not recommended for use in the admin panel |
First, check the public network conditions.
Compare the router's WAN address with the results of a public IP lookup. If they differ, or if the WAN address is a private address or falls within a shared address range such as 100.64.0.0/10, the network is typically behind a CGNAT. In such cases, traditional DDNS with port forwarding will not work directly; you should prioritize using Tailscale, ZeroTier, or a self-hosted relay.
Key Points for Configuring WireGuard
- Generate a unique key for the server and each client; do not share configurations among multiple users.
- Route only the traffic destined for your home network to avoid inadvertently sending all traffic to your home.
- In the firewall, only allow WireGuard ports; do not expose LuCI, SSH, SMB, or RDP.
- Set an appropriate PersistentKeepalive value for mobile networks and test Wi-Fi/cellular network handover.
Safety Checklist
- Keep OpenWrt, plugins, and the kernel up to date.
- Disable public-network LuCI and password-based SSH; prioritize the use of keys.
- Different remote users have distinct identities and the least privilege.
- Regularly review login, handshake, and firewall logs.
Original article by Tech.laowang. If you wish to repost this article, please credit the source: https://techlaowang.com/en/outside-openwrt-istoreos-passwall-socks/
