Key takeaways
Overview
I got tired of configuring VPN on every device. Visitor's phone, new laptop, the Android TV, the Nintendo Switch (which doesn't support VPN at all without a router-level solution). The obvious solution: configure VLESS Reality on the router itself. One subscription key, every device in the network automatically protected. Here's how I did it, what hardware works, and what you need to know before starting.
The Architecture: What Router-Level VPN Actually Does
When Xray-core runs on the router, it intercepts outgoing traffic from every device on your network and routes it through the VLESS Reality tunnel to INFOCROSS's servers. From the perspective of any device on your network — phone, laptop, TV, game console, smart fridge — the internet just works, and happened to be coming through a VPN.
The router runs Xray-core as a service, with intelligent routing rules: Russian/local domains go direct (faster), blocked/throttled domains go through the VPN. Devices never need configuration, never need a VPN app installed.
Not every router can run Xray-core. Requirements
- OpenWRT-compatible firmware (or vendor firmware with Xray support)
- Minimum 256 MB RAM — Xray-core under load uses 50–80 MB, you need headroom for routing
- Minimum 128 MB flash storage
- CPU: 500 MHz+ recommended, 800 MHz+ for households with 10+ simultaneous devices
Routers that don't meet these specs (typical ISP-provided routers, cheap TP-Link units under €30) won't work.
Path A: GL.iNet Routers (Easiest, Recommended)
GL.iNet manufactures routers running OpenWRT with a polished web interface that includes Xray/V2Ray support built-in. No command line required.
| Model | Price | Wi-Fi | CPU | VPN Throughput | Best For |
|---|---|---|---|---|---|
| GL-SFT1200 (Opal) | ~$35 | AC1200 | MIPS 880MHz | ~80 Mbps | Apartment, 5–8 devices |
| GL-MT3000 (Beryl AX) | ~$60 | AX3000 | MT7981B 1.3GHz | ~200 Mbps | House, 10–15 devices |
| GL-AXT1800 (Slate AX) | ~$90 | AX1800 | IPQ6000 1.8GHz | ~350 Mbps | Power users, 20+ devices |
| GL-MT6000 (Flint 2) | ~$120 | AX6000 | Filogic 880 1.8GHz | ~500 Mbps | Very demanding setups |
| For a typical apartment with 5–10 devices and a 100 Mbps internet connection: GL-SFT1200 ($35) is sufficient and won't be the bottleneck. | This is the non-technical path | - Connect to GL.iNet router admin panel: 192.168.8.1 in browser | - Navigate to VPN → Xray | - Paste your INFOCROSS VLESS key from @infocross_bot | - Enable → Save |
| - All devices on network now route through VLESS Reality | The web interface parses your vless://... key automatically — you don't need to extract individual parameters. Total setup time: under 10 minutes. | Path B: OpenWRT on Existing Compatible Router | If you already own a compatible router: Linksys WRT3200ACM, TP-Link Archer C7 v2/v4/v5, ASUS RT-AC68U, Netgear R7800, most Banana Pi/Raspberry Pi-based routers. | Check OpenWRT compatibility: openwrt.org/toh/start — search your exact model and version number. | Installation Steps |
SSH into your router (ssh root@192.168.1.1) then
opkg update
Create the configuration file at /etc/xray/config.json. Your INFOCROSS vless:// key contains all needed parameters
vless://[UUID]@[SERVER]:[PORT]?security=reality&sni=[SNI]&fp=chrome&pbk=[PUBKEY]&sid=[SHORTID]&type=tcp&flow=xtls-rprx-vision
Extract: UUID → users[0].id, SERVER:PORT → vnext address/port, sni → serverName, pbk → publicKey, sid → shortId. Then enable Xray as a service: /etc/init.d/xray enable && /etc/init.d/xray start.
Smart Routing: The Critical Configuration
Don't tunnel everything. Russian domains should go direct — faster, and some services detect foreign IPs. Blocked/throttled international traffic should go through VLESS.
Add routing rules in your config.json outbounds section
- geosite:ru → direct (all Russian domains)
- geoip:ru → direct (all Russian IP ranges)
- geosite:private → direct (local network)
- Everything else → VLESS Reality proxy
The geosite and geoip databases can be downloaded from v2ray-geoip and v2ray-geosite GitHub repositories. Update them monthly via a cron job.
Alternatively, use the antifilter.download project which maintains curated Russian IP/domain lists specifically for this routing use case.
Three things require periodic attention
- Xray-core updates: opkg update && opkg upgrade xray-core — run when new versions release (check github.com/XTLS/Xray-core/releases). Critical after TSPU blocking waves.
- Key updates: if your INFOCROSS key changes (after subscription renewal or server update), update it in config.json. @infocross_bot notifies you.
- Geo database updates: update v2ray-geosite/geoip monthly. Automate via cron: 0 3 1 * * /usr/bin/update-geo-databases.sh
Game Consoles and Smart TVs: The Devices That Can't Run VPN Apps
This is actually the biggest practical win of router-level VPN. Nintendo Switch, PlayStation 5, Xbox Series X, Samsung Smart TV — none of these run standard VPN clients. With a router-level VLESS setup, they're automatically protected without any configuration on the device itself. The game console just connects to your WiFi and routes through the VPN without knowing it.
Tested: PS5 downloading games from PSN US store while appearing as Russian IP — regional pricing applied correctly. Nintendo Switch accessing region-locked content via US server — worked. Xbox Game Pass international content — worked.
✅ Bottom Line
Router-level VLESS Reality: one INFOCROSS key covers every device in your home including consoles and TVs that can't run VPN apps. GL.iNet routers ($35–90) are the easiest path — no command line. OpenWRT on existing hardware is more technical but free. Key from @infocross_bot works directly.
How INFOCROSS fits this use case
INFOCROSS VPN combines Telegram payment flow, VLESS Reality key delivery, QR setup, dashboard access, partner API, and support in one product. That makes it useful for individual users, families, Telegram communities, and projects that need reseller automation.