Product Overview & Architecture Guide
Table of Contents
WifiSocks Router OS is a dedicated gateway operating system built on OpenWrt. It provides centralized proxy routing, independent per-device traffic isolation, and hardware-level DNS/WebRTC leak prevention directly at the network gateway layer.
Product Overview & Operating Model
- 100% Software-Only Distribution: WifiSocks is licensed strictly as a Digital Software License. WifiSocks does not manufacture, assemble, import, or distribute physical hardware.
- BYOD (Bring Your Own Device): Deploy on any compatible OpenWrt hardware platform, including x86 Mini PCs, Wi-Fi 6 routers, and virtual machines.
- BYON (Bring Your Own Network): Connect your own proxy infrastructure (SOCKS5, HTTP, HTTPS, Shadowsocks). WifiSocks functions as a neutral Layer 3/Layer 4 traffic routing controller and does not sell or bundle proxy bandwidth.
flowchart TD
Client["Client Devices (PC, Mobile, VM, Test Units)"] -->|"LAN Cable or Wi-Fi"| Router["WifiSocks Router OS (Gateway)"]
Router --> Policy{"Routing Policy Check"}
Policy -->|"Proxy Assigned"| ProxyOut["Encapsulated Proxy Route (SOCKS5 / HTTP / SS)"]
Policy -->|"Direct Access Enabled"| DirectOut["Direct WAN Route (Physical Gateway)"]
Policy -->|"No Proxy & Not Direct"| FailClosed["Fail-Closed Safety Mode (Internet Blocked)"]
ProxyOut --> Internet["Global Internet"]
DirectOut --> Internet
Primary Use Cases
- QA & Automation Testing Labs: Execute multi-region web and application tests across physical mobile devices and virtual machines without installing proxy client software on individual targets.
- Enterprise Network Segmentation & Multi-Region Operations: Separate department workflows, remote office branches, and multi-region business environments across isolated network subnets to prevent infrastructure cross-correlation.
- Zero-Trust Network Segmentation: Isolate local clients from lateral subnet scanning and eliminate browser DNS/WebRTC metadata leaks at the gateway.
Documentation Index
| Module / Topic | Description | Guide Link |
|---|---|---|
| Product Overview | Architecture specifications, operating models, and network topology. | Overview |
| First-Time Setup | Hardware compatibility, .ipk package installation, cabling, and license activation. |
Setup Guide |
| Proxy Routing & Auto Dispatcher | SOCKS5/HTTP/SS configuration, pool allocation, rotation, and proxy testing. | Proxy Routing |
| Direct WAN Access | Whitelist management devices to access the local WAN directly without proxies. | Direct Access |
| Leak Shield (WebRTC & DNS) | RFC 8828 WebRTC STUN isolation and UDP leak prevention. | Leak Shield |
| Virtual Gateway Isolation (VGI) | Per-client virtual MAC and gateway IP generation to eliminate ARP correlation. | VGI Guide |
| Rule-Based Routing | Split tunneling for target domains and destination IPs. | Rule Routing |
| LAN & Client Isolation | Subnet pools, DHCP lease control, and Zero-Trust lateral port blocking. | LAN Setup |
| WAN & Dual-WAN Setup | Ethernet WAN, Wi-Fi Relay, failover priority, and custom DNS. | WAN Setup |
| Wireless Management (Multi-SSID) | Radio tuning, DFS channels, single Wi-Fi creation, and bulk Multi-SSID generation (up to 32 BSSIDs). | Wireless Setup |
| Desktop Proxy Forwarders | Binding local Windows SOCKS5 tools to the router gateway. | Proxy Forwarders |
| Windows Firewall Setup | Inbound rule configuration for local proxy traffic. | Firewall Rules |
| Open Source Compliance | Two-tier architecture segregation and GNU GPLv2 compliance notices. | GPLv2 Notice |
| Legal Terms & EULA | Software licensing agreement, AUP, and liability limitations. | Legal Terms |
