AmneziaWG and VPN on Xiaomi BE3600

The Xiaomi Router BE3600 is the entry model of the Wi-Fi 7 line. Enodia installs on it on top of the stock firmware: no OpenWrt, the Xiaomi firmware stays in place. After installation the router sends blocked sites through your VPN server by itself, and everything else direct.

What works on the BE3600

• AmneziaWG — your own server, an Amnezia Premium key or a subscription; a config is loaded as a file or a vpn:// link.
• Xray (VLESS, Reality) and Hysteria2 — if your server runs them.
• WARP from Cloudflare — the router gets it by itself with one button; it serves as a backup exit and as a «road» to a server whose address your ISP blocked.
• ByeDPI — bypassing blocks without a server of your own.
• Split routing by sites, devices and Wi-Fi networks, a watchdog that switches to a backup server, encrypted DNS, home access.

About this model

• ARMv7 architecture. The wizard detects it and installs the protocol programs built for ARMv7.
• Little memory. Keep only the protocols you use turned on («Components»). For AmneziaWG, Xray and Hysteria, «Settings» has a «Tunnel memory cap»: it is on by default («Auto»), and the tunnel process will not grow so big that the router reboots under load.
• Zapret is not validated on the BE3600 yet — use ByeDPI to bypass blocks without a server.

How to install

1. Download the setup wizard from the Releases page.
2. Run it on a computer on the same network — it opens SSH on the BE3600 by itself and installs the web panel.
3. Open the panel at http://192.168.31.1:8088, add a server and choose what goes through the VPN.

Details — Installation.

Questions

Is OpenWrt needed? No. Enodia runs on Xiaomi stock firmware.

Do I need my own server? For AmneziaWG, Xray and Hysteria2 — yes (your own VPS, a subscription or an Amnezia Premium key). WARP and ByeDPI work without one.

Will the speed drop? Only the chosen sites go through the VPN; all other traffic goes direct at your ISP's full speed.

Other models — Routers.