How to Set Up a Proxy on a Keenetic Router and Secure All Devices in Your Home Network at Once

Imagine: instead of configuring the proxy separately on your phone, laptop, tablet, and Smart TV — you set it up once on the Keenetic router. After that, all traffic from the home network automatically goes through the desired IP. This is how arbitrageurs and marketers operate, who need to ensure that no device "reveals" the real address.

This article provides a complete step-by-step guide on setting up a proxy on Keenetic: from logging into the web interface to checking its functionality on all devices in the network.

Why set up a proxy on the router instead of each device

The standard approach is to configure the proxy in the browser settings or a specific application. This works, but it has an obvious downside: each new device needs to be set up manually. If you have 5–7 gadgets at home, it becomes a routine task. And if you are working with Facebook Ads or TikTok Ads accounts and want all traffic from your home network to go through one IP — configuring at the router level becomes the only convenient solution.

Here are the main advantages of using a proxy on the Keenetic router:

• One setup — all devices: smartphones, laptops, Smart TVs, gaming consoles — everything automatically works through the proxy.
• Device protection without a browser: applications that do not support manual proxy configuration will also go through it.
• Single IP for the entire network: important for arbitrageurs working with ad accounts — all actions are visible to the platform as one entry point.
• Convenient management: want to change the proxy — change it once in the Keenetic interface, and the changes apply immediately to all devices.
• Flexibility: Keenetic allows you to set up selective routing — some devices go through the proxy, others directly.

Keenetic routers (formerly ZyXEL Keenetic) are popular in Russia and the CIS precisely because their firmware supports advanced networking features: PPTP, L2TP, OpenVPN, SSTP, WireGuard, and working with proxy servers through third-party packages. This makes them an excellent choice for those who want to flexibly manage the traffic of their entire home or office network.

What you need before starting the setup

Before you begin, make sure you have everything you need. The setup will take 10–20 minutes if everything is prepared in advance.

What you will need:

1. Keenetic router with the latest firmware (version 3.x and above is recommended). You can check the version in the web interface: section “General Settings” → “Update”.
2. Proxy server data: IP address or hostname, port, username and password (if the proxy requires authentication), protocol type (HTTP, HTTPS, or SOCKS5).
3. Access to the router's web interface — usually this is the address 192.168.1.1 or my.keenetic.net.
4. A computer or laptop connected to the router via cable or Wi-Fi.

Also, decide in advance which devices should work through the proxy. If you only need to route your work laptop through the proxy, while your family's phone should connect directly — this can be configured through network segmentation or Keenetic's routing policies.

Accessing the Keenetic web interface

Before configuring anything, you need to log into the router's control panel. Keenetic has a user-friendly web interface that is accessible from any device on the network.

Step 1: Open your browser and go to the address

Enter in the browser's address bar: 192.168.1.1 or my.keenetic.net. The second option works even if you have changed the router's default IP.

Step 2: Enter your username and password

By default, the username is admin, and the password is the one you set during the initial router setup. If the password has not been changed and the default does not work — check the sticker on the router's case.

Step 3: Check the firmware version

After logging in, go to the section “General Settings” → “Firmware Update”. Make sure you have the latest version of Keenetic OS installed. Outdated versions may not support some routing features.

Step 4: Install the necessary components

Go to the section “General Settings” → “Change Component Set”. To work with proxies through tunneling, make sure the following components are installed:

• SSTP Protocol — if you are using an SSTP tunnel
• OpenVPN Client — for OpenVPN tunnels
• Entware Package Manager — for installing redsocks/3proxy for HTTP and SOCKS5 proxies

Click “Install” next to the required components and wait for the router to reboot.

Which type of proxy to choose for Keenetic

Not all types of proxies are equally convenient for configuration at the router level. Before you start, determine your task:

For arbitrage tasks and working with advertising platforms, the optimal choice is residential proxies using the SOCKS5 protocol. They have real IPs of home users, which significantly reduces the risk of blocks from Facebook Ads, TikTok Ads, and other platforms.

If your task is to monitor prices on Wildberries, Ozon, or Avito, standard HTTP proxies with IP rotation will suffice. For working with mobile applications and social networks (Instagram, TikTok), it's better to consider mobile proxies — they operate through the IPs of mobile operators and appear most natural to platform algorithms.

Step-by-step proxy setup on Keenetic

We will cover two main scenarios: setting up through OpenVPN (easier, native support) and through SOCKS5 using Entware and redsocks (for those working with classic proxy servers).

Scenario A: Setup via OpenVPN tunnel

This option is suitable if your proxy provider offers an OpenVPN configuration. Keenetic supports this natively — without additional packages.

1. Log into the Keenetic web interface at my.keenetic.net.
2. Go to the section “Internet” → “Other Connections”.
3. Click “Add Connection” and select “OpenVPN”.
4. Enter a name for the connection (e.g., “Proxy-Work”).
5. In the “Configuration” field, paste the contents of your .ovpn file received from the proxy provider.
6. If authentication is required — enter your username and password in the corresponding fields.
7. Click “Save”.
8. Activate the connection by switching the toggle to “On”.
9. Wait 10–15 seconds — the status should change to “Connected”.

Scenario B: Setting up SOCKS5/HTTP proxy via Entware and redsocks

This option is needed if you have a classic proxy server with an IP, port, username, and password. A USB drive (flash drive of at least 1 GB) will be required to install Entware.

Step 1: Prepare the USB drive

1. Format the flash drive to ext4 (on Windows, use MiniTool Partition Wizard or similar).
2. Insert the flash drive into the USB port of the Keenetic router.
3. Log into the web interface → “Applications” → ensure the flash drive is recognized.

Step 2: Install Entware

1. In the web interface, go to “General Settings” → “Change Component Set”.
2. Find the component “OPKG Package Manager (Entware)” and install it.
3. After rebooting the router, connect to it via SSH. To do this, in the “Management” → “Access” section, enable SSH access.
4. Connect via terminal (Windows: use PuTTY or the built-in SSH in Windows 10/11):

   ssh [email protected]

5. After logging in, execute the Entware installation command:

   opkg update

Step 3: Install redsocks

redsocks is a utility that intercepts TCP traffic and redirects it through SOCKS5 or HTTP proxies. Install it using the command:

opkg install redsocks

Step 4: Configure the redsocks configuration file

Open the configuration file for editing:

vi /opt/etc/redsocks.conf

Modify the file to look like this (replace the data with your own):

base {
    log_debug = off;
    log_info = on;
    log = "file:/opt/var/log/redsocks.log";
    daemon = on;
    redirector = iptables;
}

redsocks {
    local_ip = 0.0.0.0;
    local_port = 12345;
    ip = YOUR_PROXY_IP;
    port = YOUR_PORT;
    type = socks5;
    login = "YOUR_USERNAME";
    password = "YOUR_PASSWORD";
}

If you are using an HTTP proxy, replace type = socks5 with type = http-connect.

Step 5: Configure iptables to redirect traffic

Create a startup script that will redirect all local network traffic through redsocks:

vi /opt/etc/ndm/fs.d/100-redsocks.sh

Script content:

#!/bin/sh
# Start redsocks
/opt/etc/init.d/S40redsocks start

# Create iptables chain
iptables -t nat -N REDSOCKS
iptables -t nat -A REDSOCKS -d 0.0.0.0/8 -j RETURN
iptables -t nat -A REDSOCKS -d 10.0.0.0/8 -j RETURN
iptables -t nat -A REDSOCKS -d 127.0.0.0/8 -j RETURN
iptables -t nat -A REDSOCKS -d 169.254.0.0/16 -j RETURN
iptables -t nat -A REDSOCKS -d 172.16.0.0/12 -j RETURN
iptables -t nat -A REDSOCKS -d 192.168.0.0/16 -j RETURN
iptables -t nat -A REDSOCKS -p tcp -j REDIRECT --to-ports 12345
iptables -t nat -A PREROUTING -p tcp -j REDSOCKS

Make the script executable and run it:

chmod +x /opt/etc/ndm/fs.d/100-redsocks.sh
sh /opt/etc/ndm/fs.d/100-redsocks.sh

After that, reboot the router. All TCP traffic from the home network will automatically go through your proxy server.

Selective routing: proxy only for specific devices

Often, it is not necessary to route all network traffic through the proxy. For example, your work laptop should operate through the proxy, while the family members' TV and phone should connect through the regular connection. Keenetic supports this through network segmentation.

Method 1: Network segments (guest network)

Create a separate Wi-Fi segment (SSID) specifically for devices that should work through the proxy:

1. In the web interface, go to “Wi-Fi Network” → “Add Access Point”.
2. Set a network name, for example Work-Proxy.
3. In the “Network Segment” section, create a new segment and link this connection to it.
4. Configure routing for this segment through the OpenVPN tunnel or through redsocks.
5. Connect your work devices to the Work-Proxy network — they will operate through the proxy.

Method 2: Policies for specific devices by MAC address

Keenetic allows you to assign a specific internet access policy to a device (by MAC address):

1. Go to “Devices” → find the desired device in the list.
2. Click on the device → in the opened window, find the “Access Policy” section.
3. Select a policy that uses the OpenVPN tunnel or another proxy connection.
4. Save. Now only this device will go through the proxy.

How to check if the proxy is working

After the setup, make sure that the traffic is indeed going through the proxy and not directly. Here are a few simple ways to check:

Method 1: Check IP through the browser

1. On the device that should work through the proxy, open a browser.
2. Go to the website 2ip.ru or whoer.net.
3. Compare the displayed IP with your real IP from your provider (you can find out by disabling the proxy).
4. If the IP is different — the proxy is working correctly.

Method 2: Check geolocation

Visit iplocation.net and check that the country and city correspond to the geolocation of your proxy server, not your real location.

Method 3: Check for DNS leaks

Sometimes the IP is masked, but DNS requests still go directly — this is called a DNS leak. Check on the website dnsleaktest.com:

1. Open dnsleaktest.com.
2. Click “Extended Test”.
3. Ensure that all DNS servers in the results belong to your proxy provider, not your internet provider.

If a DNS leak is detected, go to the Keenetic settings and navigate to “Internet” → “DNS” and manually enter the DNS servers of the proxy provider or use public DNS (for example, 1.1.1.1 from Cloudflare).

Method 4: Check via mobile device

Connect your smartphone to the Wi-Fi of the router and open any website that shows your IP. If the IP matches the proxy — the setup is correct for the entire network.

Common problems and how to solve them

When setting up a proxy on Keenetic, you may encounter several typical errors. Let's discuss the most common ones:

Problem 1: Proxy is connected, but the internet is not working

Cause: Incorrect proxy data or the proxy server is unavailable.

Solution:

• Check the correctness of the IP, port, username, and password of the proxy.
• Ensure that the proxy server is active — check its operation directly from a computer through a browser.
• Check if your proxy subscription has expired.

Problem 2: IP does not change after setup

Cause: Traffic is not routed through the proxy — an error in iptables rules or Keenetic policies.

Solution:

• Restart redsocks: /opt/etc/init.d/S40redsocks restart
• Check if the iptables rules have been applied: iptables -t nat -L REDSOCKS
• For OpenVPN: ensure that the tunnel is designated as the default gateway in Keenetic policies.

Problem 3: Slow speed through the proxy

Cause: The proxy server is overloaded or physically located far from you.

Solution:

• Select a proxy server with a geolocation closer to your country.
• If you are using residential proxies with rotation — ensure that a fixed session (sticky session) is selected, otherwise the IP will change too frequently.
• Try switching from HTTP to SOCKS5 — it has less overhead.

Problem 4: After rebooting the router, the proxy stops working

Cause: The redsocks startup script is not added to the autostart.

Solution: Ensure that the script is in the /opt/etc/ndm/fs.d/ folder and has execution rights. Files from this folder are automatically run by Keenetic after booting.

Problem 5: Some websites are inaccessible through the proxy

Cause: Some websites block IP addresses from data center ranges or specific countries.

Solution: For tasks where high compatibility with websites is important (social networks, marketplaces, advertising platforms), use residential proxies instead of data center proxies — they are significantly less likely to end up on block lists.

Conclusion

Setting up a proxy on the Keenetic router is an hour spent once that saves you from having to configure each device separately. After the correct configuration, all traffic from your home or office network automatically goes through the desired IP: smartphones, laptops, Smart TVs, and even smart home devices.

For most tasks — protecting your home network, working with foreign services, monitoring prices on Wildberries and Ozon — configuring through an OpenVPN tunnel (Scenario A) is sufficient. If you are working with classic proxy servers using SOCKS5 or HTTP — use the Entware + redsocks combination (Scenario B).

Remember: the quality of operation directly depends on the type of proxy. For tasks where high anonymity and minimal risk of blocks are important — advertising accounts, social networks, marketplaces — we recommend using residential proxies. They operate through real IPs of home users and raise almost no suspicions with platform protection systems.