Android Killswitch using Proxy and OpenWRT

Hardware Questions and Recommendations
1

I'm looking to build a setup with OpenWrt where different devices on my network are forced through different Bright Data (or any other proxy provider) HTTP/HTTPS proxies, while all other devices use the normal WAN connection.

Example:

  1. Smartphone A → Bright Data Proxy X
  2. Smartphone B → Bright Data Proxy Y
  3. PC → Bright Data Proxy Z

All other devices → Direct internet connection (no proxy)

Requirements:

  1. Transparent proxying (devices should not need any proxy configuration).
  2. A proper killswitch:
  3. If Proxy X goes down, Smartphone A should completely lose internet access.
  4. Same for the other devices.
  5. No direct WAN fallback and no IP leaks.

Ideally manageable through OpenWrt routing/firewall rules. Bright Data proxies use username/password authentication.

I've been looking at solutions like:

  • redsocks
  • sing-box
  • policy-based routing
  • VLAN separation

Hardware-wise I'm considering getting a new OpenWrt-compatible router (currently have an old TL-WR1043ND, which is probably underpowered (? RAM & Flash?) and I found online a nice TP-Link Archer C7 v5 used for 35€.

What would be the cleanest and most reliable way to implement this in 2026?

Ty

2

Id lean into pbr or the new, reworked mwan3.