Overwall on Routers
Coming September 2026
Router-level Overwall is in active development, shipping for general availability in September 2026. Today, the supported way to use Overwall is through our native apps (macOS, iOS, Android, Windows).
Want early beta access? support@overwall.app.
When it ships, Overwall at the router level means every device in your home (smart TV, game console, laptop, phone) goes through Overwall automatically. No app to install on each device. One command on one router.
1. Why your router's built-in VPN button doesn't work
Your router probably has a "VPN Client" section already. It works with NordVPN, Mullvad, Proton. So why will Overwall need a different approach?
Because your router's VPN client speaks two languages: OpenVPN and WireGuard. Those protocols are great for privacy, but in China they're obvious. The firewall recognizes them instantly and blocks them.
Overwall uses a third protocol, VLESS+Reality, which makes the connection look identical to normal HTTPS traffic. It's why Overwall survives in China where other VPNs don't, but it also means the router needs software that understands Reality. That software exists ( sing-box), but no consumer router ships it by default. We're solving that.
2. What the experience will look like
One command. No firmware surgery, no copying files around, no config editing.
Get an activation code from your dashboard
A six-character code valid for 10 minutes, tied to the router you're setting up.
Paste one command into your router
curl -fsSL overwall.app/setup | OW=A7F3K2 shThirty seconds later, your whole network is on Overwall
Every device that connects to your Wi-Fi (smart TV, console, laptop, phone) goes through Overwall automatically.
3. Which router to buy
Any router that runs OpenWrt, the open-source Linux firmware that powers a lot of the networking world. Two mainstream picks cover 95% of customers:
GL.iNet Flint 2 (GL-MT6000)
Around $170. Wi-Fi 6, 1 GB RAM, 2.5-gigabit ports. Ships with OpenWrt from the factory. No firmware flashing required. Plug it in, run the one command, done.
Widely available on Amazon and direct from GL.iNet.
An OpenWrt router you already own
Check the OpenWrt Table of Hardware. Over a thousand models are supported. If you're already running OpenWrt on a router you bought, the same one-line install will work.
A small mini-PC (homelab option)
Intel N100 mini-PCs (~$200) can run OpenWrt and handle gigabit-plus throughput. You pair it with any Wi-Fi access point. Overkill for most homes, perfect if you already have a network closet.
4. A small thing about GL.iNet
GL.iNet routers have two sides: a branded GL.iNet app (the screens you see when you first log in) and the real OpenWrt underneath. The branded app only supports OpenVPN and WireGuard, so you'll look there and not find Overwall. That's normal. Our install command uses the OpenWrt side underneath, which is already there. Nothing to flash, nothing to replace.
5. pfSense and OPNsense users
Not directly compatible. pfSense and OPNsense run a different operating system that can't run our client software cleanly. The workaround is simple: put a small OpenWrt box (Flint 2 or equivalent) downstream of pfSense, and route your devices through that.
Want to beta test?
We're onboarding a small group of users before the September launch, typically people running GL.iNet Flint 2, other OpenWrt routers, or a homelab mini-PC. If you're comfortable with SSH and want early access, we can get you set up.
Reach out: support@overwall.app
References
- OpenWrt Table of Hardware: full list of supported routers.
- GL.iNet Flint 2 product page: the recommended router.
- sing-box: the open-source client software our install command sets up on your router.
- XTLS / REALITY: the stealth layer Overwall uses to disguise its traffic.