How to config router to route wireless traffic through a proxy client running on the device

[leojplin]

Hi Openwrt.

I am new to the whole custom router thing, but I do have a CS background and I want to archive following. Appreciate any help in advanced!

I have installed a proxy client connected to the proxy server on my router. The proxy software I am using is https://github.com/apernet/hysteria, although I don't think it would matter conceptually. I can already curl via this proxy within the router, so the connection with the proxy server works. This proxy client is exposing an HTTP proxy running on port 8889. Usually I just run the equivalent proxy client on my laptop and set the OS proxy to point to localhost:8889, and everything works fine.

I now want to run this proxy client on my router, so everything device connected to the router can automatically be using the proxy.

I have tried simply running the proxy client on the router, and setting my laptop's proxy setting to point to {router_ip:8889} as a test, and it doesn't work like when the proxy client was running on my laptop. I simply can't connect to the proxy whatsoever.

How would I go about achieving what I described? Thanks again!

[frollic]

@leojplin

I do have a CS background

Counter Strike ?

@leojplin

setting my laptop's proxy setting to point to {router_ip:8889} as a test, and it doesn't work like when the proxy client was running on my laptop.

I assume you've adapted the settings in https://hysteria.network/docs/quick-start/ ?

[lleachii]

How to tunnel all client traffic though SOCKS5 proxy?

I couldn't find anything significant on google. How could I route all my router traffic(LAN or wireless) through a SOCKS5 proxy? Abort all traffic if proxy is unavailable. How to make it easier to change proxies in admin panel of openwrt router? Is it possible to make a separate page in openwrt admin panel of my router where I can load my list of socks5 proxies, check them for availability and make one of them active like select-apply button?

[slh]

In a https/ hsts world, transparent proxies are no longer possible (unless you do want to roll out your own CA and import it to all potential clients, while possible, it's not a task i'd want to be looking at - and it introduces its own kind of security concerns), you need to set the proxy setting on your endpoints.