OutSpeed VPN on a router with OpenWrt and Passwall

Check the requirements first

• A router whose exact hardware revision supports OpenWrt, or an already compatible installation.
• Wired administration access and saved ISP connection details.
• Passwall and a networking core supporting your profile's protocol, transport and security.
• An active OutSpeed VPN subscription and confirmation that the chosen router client is compatible.

A stock firmware's VPN menu does not support every protocol. A WireGuard option, for example, does not imply VLESS support. Different revisions of the same router can also use different hardware.

Before buying or flashing a router, ask OutSpeed VPN about a compatible connection method and device accounting. Do not assume that the entire home network always counts as one device: your plan and binding mechanism determine that.

Step 1. Save a working starting point

Record the model, hardware revision and firmware version. Back up the configuration and ISP details, and identify the recovery procedure for that exact model. Use Ethernet during setup so a Wi-Fi change does not interrupt administration.

If OpenWrt is not installed, follow the official page for your precise device. Initial installation and image type are device-specific. Make ordinary internet access work before adding the VPN.

Step 2. Prepare Passwall

Use the official Passwall project to find an installation method matching your OpenWrt release and CPU architecture. Packages for a different release or architecture can cause dependency failures.

Open Passwall in LuCI after installation and check the required core and profile features. If your OutSpeed VPN account does not offer router instructions, ask support for a compatible format first. An account webpage is not a subscription endpoint.

Step 3. Add your OutSpeed VPN profile

1. Create a subscription entry if your format is supported, using the personal URL supplied by OutSpeed VPN.
2. Refresh it and check that nodes appear. If direct import is unsupported, use only a method agreed with support.
3. Choose a test node and retain its original protocol, transport and keys.
4. Check router date, time and server reachability.
5. Route one test device first if your Passwall version supports that scope.

Enable automatic updates after a successful manual import. An empty node list needs a download or format diagnosis; changing the entire network's mode will not fix it.

Step 4. Choose a routing policy you understand

Decide whether the VPN should carry one device, specific domains or most home traffic. Mode labels and bundled lists vary by Passwall version, so inspect the actual rules.

chnroute concerns Chinese network lists; it is not an automatic Russian-service bypass. Configure the required direct rules explicitly. Keep local router administration reachable without a remote VPN server.

With split routing, an IP-check page can go directly while a video service uses the VPN. That is valid if it matches your policy. A single IP result does not describe every site's route.

Test and keep a way back

• Check normal sites, the intended service, calls and local-device access on the test device.
• Verify that ordinary internet still works with Passwall off.
• Watch router CPU load during downloads.
• Save the working configuration before expanding the policy.

If access fails, disable Passwall and revert the changed rules first. A factory reset removes configuration, including ISP details, and should not be the first response. For support, prepare router, OpenWrt, Passwall and core versions, plus the error with keys and subscription URLs removed.