The Complete OpenWrt Guide 2026: Turn Your Old Router into a Software Router with This Open-Source OS

# SSH into the router
ssh root@192.168.1.1

# Back up the entire firmware (send to your local PC via TFTP)
cat /dev/mtd0 > /tmp/original_firmware.bin
# Then download the file from the router

# You'll need a USB-to-TTL adapter (CH340/CP2102, about ¥10)
# After connecting, run this on your PC
minicom -D /dev/ttyUSB0 -b 115200

# Once in U-Boot, run the backup commands

# 1. Flash Breed first (requires SSH or TTL access)
# Breed files are typically in .bin format

# 2. Hold the router's Reset button while powering on to enter the Breed Web interface
# Open your browser and go to 192.168.1.1

# 3. In the Breed interface, select the OpenWrt firmware and flash it
# Breed supports recovery, so even if you flash the wrong image, you can re-flash

# 1. Download the x86 OpenWrt image (combined-ext4.img.gz)
wget https://downloads.openwrt.org/releases/23.05.3/targets/x86/64/openwrt-23.05.3-x86-64-generic-ext4-combined.img.gz

# 2. Decompress
gunzip openwrt-23.05.3-x86-64-generic-ext4-combined.img.gz

# 3. Write to USB drive (assuming /dev/sdb — double-check this!)
sudo dd if=openwrt-23.05.3-x86-64-generic-ext4-combined.img of=/dev/sdb bs=4M status=progress

# 4. Boot the software router from the USB drive; OpenWrt will automatically write to the internal drive

# SSH in (no password on first login, just press Enter)
ssh root@192.168.1.1

# Set a root password
passwd

# Update the package list
opkg update

# Install the Chinese language pack
opkg install luci-i18n-base-zh-cn

# Refresh the web interface — it should now appear in Chinese

# Edit the network config file
vi /etc/config/network

# Typical LAN config example:
# config interface 'lan'
#     option type 'bridge'
#     option ifname 'eth0'
#     option proto 'static'
#     option ipaddr '192.168.2.1'
#     option netmask '255.255.255.0'

# Restart the network service
/etc/init.d/network restart

# Edit DHCP config
vi /etc/config/dhcp

# Key settings:
# config dhcp 'lan'
#     option interface 'lan'
#     option start '100'          # Starting address offset
#     option limit '150'          # Pool size
#     option leasetime '12h'      # Lease duration
#     option ra 'server'          # IPv6 RA mode
#     option dhcpv6 'server'      # IPv6 DHCP

# Restart DHCP service
/etc/init.d/dnsmasq restart

# Add to /etc/config/dhcp:
# config host
#     option name 'nas'
#     option mac 'AA:BB:CC:DD:EE:FF'
#     option ip '192.168.2.100'

# Via LuCI web interface: Network → Firewall → Port Forwards

# Or via command line:
uci add firewall rule
uci set firewall.@rule[-1].name='Allow-NAS'
uci set firewall.@rule[-1].src='wan'
uci set firewall.@rule[-1].dest_port='8080'
uci set firewall.@rule[-1].target='ACCEPT'
uci set firewall.@rule[-1].proto='tcp'
uci commit firewall
/etc/init.d/firewall restart

# Install SmartDNS
opkg install smartdns

# Configure SmartDNS to use multiple upstream DNS servers
vi /etc/smartdns/smartdns.conf

# Add upstream DNS servers:
# server 223.5.5.5 -group alidns
# server 119.29.29.29 -group dnspod
# server 8.8.8.8 -group google

# Set the listening port
# bind :6053

# Set DNS cache size
# cache-size 512

# Restart the service
/etc/init.d/smartdns enable
/etc/init.d/smartdns restart

# Install via opkg
opkg install adguardhome

# Or manually install the latest version:
wget https://github.com/AdguardTeam/AdGuardHome/releases/latest/download/AdGuardHome_linux_armv7.tar.gz
tar -xzf AdGuardHome_linux_armv7.tar.gz
./AdGuardHome -s install

# Open your browser and go to http://192.168.2.1:3000 to complete setup

opkg install adbyby
/etc/init.d/adbyby enable
/etc/init.d/adbyby start

# Install WireGuard
opkg install wireguard-tools luci-app-wireguard

# Generate WireGuard keys on the WAN side
wg genkey > /etc/wireguard/server_private.key
wg pubkey < /etc/wireguard/server_private.key > /etc/wireguard/server_public.key

# Edit the config
vi /etc/wireguard/wg0.conf

[Interface]
PrivateKey = <your server private key>
Address = 10.8.0.1/24
ListenPort = 51820

# Client 1
[Peer]
PublicKey = <client public key>
AllowedIPs = 10.8.0.2/32

# Start WireGuard
wg-quick up wg0

# Enable on boot
/etc/init.d/wireguard enable

# Install Docker
opkg install docker docker-compose luci-app-dockerman

# Start the Docker service
/etc/init.d/dockerd enable
/etc/init.d/dockerd start

# Verify the installation
docker --version
docker info

# Create a persistent storage directory
mkdir -p /srv/homeassistant

# Pull and run
docker run -d \
  --name homeassistant \
  --restart=unless-stopped \
  --network=host \
  -v /srv/homeassistant:/config \
  homeassistant/home-assistant:stable

# Open your browser and go to http://192.168.2.1:8123

docker run -d \
  --name adguardhome \
  --restart=unless-stopped \
  --network=host \
  -v /srv/adguard/work:/opt/adguardhome/work \
  -v /srv/adguard/conf:/opt/adguardhome/conf \
  adguard/adguardhome:latest

# Install frp client
opkg install frp

# Configure frpc
vi /etc/frpc/frpc.toml

serverAddr = "your frp server IP"
serverPort = 7000

[[proxies]]
name = "web"
type = "tcp"
localIP = "127.0.0.1"
localPort = 80
remotePort = 8080

# Start frp
/etc/init.d/frpc enable
/etc/init.d/frpc start

# Install nlbwmon (lightweight traffic stats)
opkg install nlbwmon luci-app-nlbwmon

# Or install the more powerful BanDaWidth
opkg install bandwidth

# Install real-time traffic monitoring (OpenWrt version of iftop)
opkg install iftop

# See in real time which IP is consuming the most bandwidth
iftop -i br-lan

# Enable IPv6 (the LuCI interface is more intuitive for this)
# Network → Interfaces → LAN → Edit → DHCP Server → IPv6 Settings

# Command line approach:
uci set network.lan6='interface'
uci set network.lan6.device='@device'
uci set network.lan6.proto='dhcpv6'
uci commit network
/etc/init.d/network restart

# Method 1: Via LuCI web interface
# System → Backup / Flash Firmware → Download new firmware → Flash

# Method 2: Command line
sysupgrade -v /tmp/openwrt-xxx-squashfs-sysupgrade.bin

# Update while keeping your config (recommended):
sysupgrade -c /tmp/openwrt-xxx-squashfs-sysupgrade.bin

# Fresh install (discard config):
sysupgrade -n /tmp/openwrt-xxx-squashfs-sysupgrade.bin

# Back up current config
sysupgrade -b /tmp/config-backup.tar.gz

# Restore from backup
sysupgrade -r /tmp/config-backup.tar.gz

# List backup contents
tar tzf /tmp/config-backup.tar.gz

# Update package sources
opkg update

# Search for packages
opkg find luci-app-*

# Install a package
opkg install <package-name>

# List installed packages
opkg list-installed

# Remove a package
opkg remove <package-name>

# Clean cache
opkg clean

# Check if the WAN port got an IP
ifconfig eth1

# Check the default gateway
route -n

# Test DNS
nslookup baidu.com

# Manually set DNS
vi /etc/resolv.conf
# Add: nameserver 223.5.5.5

# Restart networking
/etc/init.d/network restart

# Check uhttpd service status
/etc/init.d/uhttpd status

# Restart the web service
/etc/init.d/uhttpd restart

# Check firewall rules
iptables -L -n

# Check WiFi status
wifi status

# Regenerate the default config
wifi config

# Edit the WiFi config
vi /etc/config/wireless

# Enable WiFi
uci set wireless.@wifi-device[0].disabled=0
uci commit wireless
wifi reload