Skip to main content
SpiderVPN

OpenWrt guide

WireGuard VPN for OpenWrt routers

SpiderVPN works on OpenWrt 22.03 or later with WireGuard. Make a WireGuard file in your SpiderVPN account and import it in LuCI, and the devices behind your router use the VPN too, including TVs and consoles that can't run a VPN app. The router's private key is made in your browser, so SpiderVPN never sees it.

Open Router setup
Where the SpiderVPN file goes in LuCI, from step 2

You need a SpiderVPN account

Use an account with a subscription or a free trial. The free trial is for accounts without a SpiderVPN plan; it starts at checkout, and the free trial page explains how it works and what you pay after it.

Plans bought on spidervpn.org: £3.99 every month, £31.99 every year (£2.66/mo) or £50.99 every 2 years (£2.12/mo). Compare plans

What you need

  • OpenWrt 22.03 or later with LuCI (the web interface).
  • WireGuard support. If WireGuard VPN isn't offered as a protocol in step 2, install the luci-proto-wireguard package under System → Software and restart the router.

Steps

  1. 01

    Make your WireGuard file

    On a device behind the router, open spidervpn.org/what-is-my-ip and note the address it shows. You'll compare it in step 3.

    1. Sign in at spidervpn.org and open Account → Router setup.
    2. Pick a location, enter a name for the router, and choose Generate file.
    3. Choose Download file or Copy text. The file is shown only once. If you lose it, remove that config on the Router setup page and make a new one.

  2. 02

    Import it into OpenWrt

    1. Go to Network → Interfaces → Add new interface. Name it spidervpn, choose WireGuard VPN, then choose Import configuration and paste or drop in the file.
    2. On the Peers tab, edit the peer and tick Route Allowed IPs.
    3. On the Firewall Settings tab, put the interface in the wan zone. Select Save & Apply.

    On PPPoE or mobile internet, set the interface's MTU to 1280.

    After the import, check that the file's DNS line is still set on the interface.

  3. 03

    Check it

    On a device behind the router, open spidervpn.org/what-is-my-ip again. The address it shows should be different from the one you noted before step 1.

Other routers

The Router setup page has steps for GL.iNet (firmware 4), Asuswrt-Merlin 388.1 or later, ASUS VPN Fusion, UniFi, Firewalla, MikroTik (RouterOS 7), and pfSense or OPNsense (typed in by hand). TP-Link should work but isn't verified. Netgear stock firmware and Synology SRM aren't supported.

Good to know

  • Each router file counts as one device on your account. One account, up to 10 devices at once (see downloads). To free its slot, remove the config on the Router setup page.
  • If the router stays off for 7 days, its config is removed, and you download a new one.
  • Prefer a ready-made SpiderVPN Router? Choose Lite Router or Pro Router at checkout.

Need help?

Our support team helps with your account and router setup.

Go to supportEvery device and setup option

Apple, iPhone, iPad, Mac and Apple TV are trademarks of Apple Inc., registered in the U.S. and other countries and regions. App Store is a service mark of Apple Inc. Amazon, Amazon Appstore, Fire TV and all related marks are trademarks of Amazon.com, Inc. or its affiliates. Android, Google Play and Android TV are trademarks of Google LLC. Windows is a trademark of the Microsoft group of companies. Linux is the registered trademark of Linus Torvalds in the U.S. and other countries. OpenWrt is a registered trademark of Software Freedom Conservancy. SpiderVPN is not affiliated with or endorsed by the OpenWrt project.