Direct WAN Access: Proxy Bypass Management
Table of Contents
Under the default Fail-Closed security policy, WifiSocks blocks outbound internet on connected devices until a proxy route is assigned. This safeguards client devices against unintended public IP exposure.
When administrative devices (such as management laptops, internal NAS file servers, or network printers) need unproxied internet access, grant them Direct WAN Access.
1. Operating Principle & Traffic Flow
flowchart TD
Client["Client Device (e.g., Admin PC / Printer)"] --> Gateway["WifiSocks Router Gateway"]
Gateway --> CheckProxy{"Proxy Assigned in Proxy Routing?"}
CheckProxy -->|"Yes"| ProxyTunnel["Tunnel Traffic Through Proxy"]
CheckProxy -->|"No"| CheckDirect{"Direct WAN Toggle Status"}
CheckDirect -->|"Green (Enabled)"| DirectWAN["Direct Internet via Physical WAN"]
CheckDirect -->|"Gray (Disabled)"| Blocked["Fail-Closed Safety Mode (Internet Blocked)"]
- Direct WAN (Green): Outbound traffic routes straight through the router physical WAN interface using standard NAT, bypassing the proxy routing daemon.
- Blocked State (Gray): If no proxy is assigned and Direct WAN is disabled, the router prevents the device from sending unrouted packets to the public internet.
2. Configuration Steps
- Connect the target device to the router via Ethernet cable or Wi-Fi.
- Open the web dashboard (
http://192.168.105.1). - Navigate to Router Configuration -> Connection Setup.
- Locate the device in the Direct Internet Access Management list.
- Note the indicator color:
- Green: Direct internet access is enabled for this device.
- Gray: Direct internet access is disabled (traffic remains blocked until a proxy is assigned).
- Click the device toggle to turn the status to Green.
- Scroll to the bottom and click Update to apply the configuration.
3. Recommended Use Cases
- Management Workstations: Keep your primary configuration PC on Direct WAN access to prevent proxy latency during administrative tasks.
- Network Infrastructure & Peripherals: Allow network printers, NAS storage appliances, and smart switches to communicate without consuming proxy bandwidth.
- Host Machines Running Local Proxy Forwarders: When running tools like PIA Proxy or 922 Proxy on a Windows PC, set that PC to Direct WAN so it can fetch proxy connections reliably. See Connecting Desktop Proxy Forwarders.
4. Troubleshooting
Device loses direct access after assigning a proxy
Assigning a proxy string in the Proxy Routing tab overrides Direct WAN bypass. To restore direct access, remove the proxy string from that device in the Proxy Routing tab, confirm the toggle in Connection Setup is Green, and click Update.
Changes do not take effect immediately
Verify you clicked Update at the bottom of the card. Refresh your browser to verify the device toggle remains green.
