WrtNova Firmware Builder

Firmware target

OpenWrt version

Device

This device has less than 230 MB RAM

Replaces AdGuard Home with dnsproxy.

Mode

Router Access point

System

Hostname

Root password

Used for SSH login and AdGuard Home admin.

SSH public keys

One key per line.

Timezone

Network

Default IP prefix

Default subnet

Networks & addressing

On	Network	IP prefix	VLAN ID	Subnet	Router IP
	LAN				—
	Guest				—
	IoT				—
	WireGuard VPN				—

WireGuard VPN network is a dedicated network with its own WiFi SSID; all its traffic is routed through the WireGuard VPN client.

Additional trunk VLANs

Extra VLAN IDs to trunk (tagged) through every port on this device. Space-separated; ranges as low-high.

WireGuard VPN client

Don't have a WireGuard config? Use Cloudflare's free WARP.

Private key

Peer public key

Endpoint

Endpoint port

Preshared key

Client IPv4

Client IPv6

Allowed IPs

You can switch to a different WireGuard config later via LuCI → Network → Interfaces → vpn → Edit → Load configuration. When importing a config, remember to enable Route Allowed IPs in Peers setting.

WAN

Connection type

DHCP PPPoE

WAN MAC address

WAN options

Tagged WAN VLAN (required by some ISPs)

Enable secondary WAN (WAN-B)

WiFi

Country code

Dense environment Tighten roaming/steering thresholds

Wireless mesh

Enable 802.11s mesh backhaul

Note: Wired backhaul is always better when feasible

Network SSIDs

LAN

Default to 12345678 when password is empty

Advanced channels & logging

2.4 GHz channel

5 GHz channel

6 GHz channel

WiFi log level

IPv4 port forwarding

Hostname	Last octet	Ports (space-separated)

Each row create a static DHCPv4 lease and add port forwarding from WAN. Ports must be unique.

IPv6 server exposure

Hostname	Last octet	Ports (empty = all)

Each row create a static hostid (IPv6 Token) in DHCP leases, IPv6 firewall forward rule, and Cloudflare DDNS entry. After boot, go to Network -> DHCP Leases and update the DUID for each host to match the actual client DUID.

DDNS (Cloudflare)

Enable DDNS

Lookup hostname

Cloudflare API token

DDNS entries for IPv6-exposed hosts are derived from the IPv6 Exposure table — no extra config needed.

Failover

USB tethering

Enable USB tethering (Android / iPhone, device usb0)

Cellular modem (MBIM)

Enable modem failover

Additional packages

Auto-added

Extra packages

Appended to the final list. Prefix with - to remove an auto-added package.

Performance & misc

Software flow offload

Can increases network throughput.

Hardware flow offload

Higher network throughput and lower CPU usage where supported.
Do not enable if using QoS/SQM.

Block DoT and DoQ

Enforce ad blocking on stubborn client devices.

Recent builds

No builds yet.