Protocols¶
Each protocol is a separate component: under «Components» in the panel you turn on only the ones you need, and the router downloads them by itself. You can keep a main protocol and up to six additional exits at once — for example, AmneziaWG for everything blocked and WARP for a few sites.
| Protocol | Needs your own server | What for |
|---|---|---|
| AmneziaWG | yes (or Amnezia Premium) | The main VPN: fast, resistant to WireGuard blocking |
| Xray | yes | VLESS, Reality and others — when AmneziaWG gets cut |
| Hysteria2 | yes | A fast protocol over QUIC |
| WARP | no | Cloudflare's free exit, the router gets it by itself |
| ByeDPI | no | Bypassing blocks without a server |
| Zapret | no | Bypassing blocks without a server, right in the router's kernel |
AmneziaWG¶
AmneziaWG is WireGuard with obfuscation that blocking systems do not
recognise. It takes a config from AmneziaVPN (a .conf file or a vpn:// link), a subscription, 3x-ui panels
included, or an Amnezia Premium key — the router takes the configs of the countries you pick from Amnezia by
itself.
Xray (VLESS, Reality)¶
Xray-core: VLESS (Reality included), VMess, Trojan, Shadowsocks. Servers are added by a link, a subscription or a file; subscriptions update on a schedule. «Check servers» in the panel checks each one with a real connection through it, not a ping.
Hysteria2¶
Hysteria2 runs over QUIC (UDP) and gets the most out of a poor channel. A
server is added by a hysteria2:// link or a subscription.
WARP¶
Cloudflare's free WARP. The router registers by itself — one button, the key is created on the router and never leaves it. WARP serves as a separate exit or as a «road» to your server: if your ISP blocked the VPS address, traffic to it goes through WARP. If the ISP starts cutting WARP's port, the watchdog picks another one by itself.
ByeDPI¶
ByeDPI bypasses blocks without a server: it changes how the router sends the first packets of a connection, and the blocking system stops recognising the site. Handy for particular sites and services.
Zapret¶
Zapret does what ByeDPI does, but in the router's kernel (NFQUEUE), with more techniques. Validated on the BE7000 and on the AX3600 with stock firmware 1.1.21 (there the component brings a kernel support package). Other models and firmware need separate validation.
What to choose
Have your own server — start with AmneziaWG. If it gets cut too, add Xray (VLESS, Reality) as a backup. No server — try WARP and ByeDPI/Zapret: some sites will open that way.