[OPEN CALL šŸ“£] Bring NymVPN to OpenWRT!

Nym Squad League NSL news
149

This is a known bug myself and a few others have experienced on certain hardware. Something with the crypto is failing in the bandwidth credential claiming process.

I get this same error on my GL.inet SFT1200. Iā€™ll dive into it this weekend, need to add debug logging so we can get a more specific error than failed to claim ecash bandwidth with the gateway.

1 Like
150

@code-zm thank you in advance, looking forward for your response

151

Could you recommend a Router which is already tested for NYM openWRT and is powerful enough, not too hard to configure? Ideally 2-3 options. Thanks.

152

Please add an option to disable routing on the vpn interface so that I could use pbr to route certain domains to the nymvpn mixnet

153

UPDATES:

  • Instead of relying on Wireguard kernel modules, Iā€™m changing the backend to use Mullvadā€™s user space implementation, GotaTun.

  • Putting together a site for documentation, install process, recommended routers etc.

  • Bug fixes on the way

Thank you to everyone who has been testing it out!

2 Likes
154

Just ordered your make and model of gl.inet router (AX1800).

Also was wondering if you are running standard OpenWrt or the GL.inet version?

155

Made a new repo, stripped down to only what we need for OpenWrt:

1 Like
156

Hi,

I am trying to install nym-vpn_1.23.2_x86_64.ipk on the latest OpenWrt, but I encountered two problems:
Iā€™m skipping the fact that we canā€™t install from webgui by televersing the package from a browser. We just have to wget the package from the router.

  1. Package requires a key for installation
    Running:

    apk add --allow-untrusted ./nym-vpn_1.23.2_x86_64.ipk

    gives an error about a signature, even with --allow-untrusted. It seems the package is signed in a way that the OpenWrt package manager cannot bypass.

  2. V2 package format error
    The same command outputs:

    ERROR: ./nym-vpn_1.23.2_x86_64.ipk: v2 package format error

    This suggests the .ipk is not fully compatible with the new apk OpenWrt package manager.

Suggestions / Requests:

  • Provide a signed .ipk package or instructions to generate a key so that installation works without errors.
  • Allow installation with --allow-untrusted to let users install custom packages.
  • Consider generating packages compatible with OpenWrtā€™s current manager.

Environment:

  • OpenWrt version: latest stable (x86/64 - OpenWrt 25.12.0 r32713-f919e7899d / LuCI openwrt-25.12 branch 26.063.06248~6e98b63)

Thank you.

PS: I just saw the new repo. It will still bring the same issues of the key, and the .ipk.
Also I donā€™t know if itā€™s normal, but there is no package on the release page of the new github page.

1 Like
157

Thanks for the feedback!

Just added a step in the build workflow to package for apk.

Regarding the new repo, Iā€™m still making changes and fixes until I put out a release. Check here again over the weekend, should have a new release up soon.

If you canā€™t wait, download the pkg-* file from the workflow run artifacts: Release musl binaries Ā· dial0ut/nym-vpn-openwrt@73a2003 Ā· GitHub

1 Like
158

stock Gl.inet

159

Found the cause of the bug. Issue was ecash serialization on 32 bit platforms producing a different hash than what 64 bit platforms (gateways) expect.

Putting out a new release today.

Thanks for your patience!

160

I have it running on GL.inet AX1800. Iā€™d recommend something with at least 256MB disk and 256MB RAM.

You can fit it onto weaker devices like GL.inet SFT1200 with some workarounds. Using zram and overlayfs works for me.

Will be purchasing more routers soon for testing. Also, once I get the website up and running Iā€™ll put out an official minimum spec.

161

v1.25.0 Release

New release is ready! Release Nym VPN v1.25.0 Ā· dial0ut/nym-vpn-openwrt Ā· GitHub

  • Pure rust user space wireguard via Mullvadā€™s Gotatun
  • Ad blocking
  • Performance optimization
  • .apk files for newer OpenWrt versions