Pick the right hardware, follow 4 steps, and every device on your home network — TV, console, smart speaker — gets seamless VPN.
These five models are field-tested with k2r and span entry-level to pro-grade budgets.

The OpenWrt community workhorse — best price-to-performance
300M-500M home broadband / users new to flashing

The sweet spot — slightly stronger than AX6S
500M-800M home broadband / mainstream households

Ships with OpenWrt — zero flashing required
Gigabit broadband / users who want no-flash convenience

The reliable mid-range workhorse
Sidecar router / households that already have a Wi-Fi AP

Performance monster — won't bottleneck for 5-10 years
Gigabit-plus broadband / power users running multiple services
The path depends on hardware type. Flashing carries brick risk — newcomers should consider a pre-flashed Overleap router (see bottom of page).
⚠️ Flashing has bricking risk. Always back up the stock firmware first; if you're not comfortable, choose the pre-flashed Overleap router service below.
ARM routers need third-party OpenWrt firmware. Common choices are ImmortalWrt or mainline OpenWrt. Core steps:
SSH into the router and run this one-liner — it auto-detects ARM64 / x86_64 / ARMv7 and downloads the matching binary.
$ wget -qO- https://kaitu.io/i/k2r | sudo shThe script does three things: ① download the k2r binary for your CPU; ② install an /etc/init.d service; ③ start k2r immediately. After that, open http://<router-IP>:9000 in your browser to reach the admin panel.
OpenWrt usually ships wget-ssl. Use curl instead: curl -fsSL https://kaitu.io/i/k2r | sudo sh
Some Chinese ISPs block the CDN. Manually download the binary from https://d0.all7.cc/kaitu/k2r/LATEST/ and scp it to the router.
Re-run the install command. The script swaps the binary and restarts the service.
On first launch, the admin panel asks you to bind a Overleap account and paste a license key (or k2subs subscription URL).
Visit http://<router-IP>:9000. You'll be prompted to set an admin password the first time.
Use the email associated with your Overleap purchase; you'll receive a one-time code.
On the Smart Server tab, paste your k2subs:// URL. The router auto-picks the best server.
Any device on this router's Wi-Fi or LAN now uses the VPN automatically — TVs, consoles, smart speakers, no per-device setup.
(Admin panel screenshot — coming soon)
ARM routers have U-Boot recovery (short-circuit + TFTP back to stock), but full bricks happen. If you're uncertain, the pre-flashed Overleap K2 Mini / K2-001 (bottom of page) eliminates this risk.
Manufacturers usually deny warranty claims for 'unauthorized modification'. Buying second-hand or OEM units to flash is one workaround; pre-flashed Overleap units come with their own warranty.
Yes — any router with arm64 / armv7 / amd64 / mipsle running OpenWrt or Linux works. Performance scales with CPU: old MIPS routers do ~100Mbps; A53×4 @ 2GHz saturates gigabit.
Step 3 needs one SSH command (use PuTTY or Termius — beginner-friendly). Step 4 is fully GUI in the browser.
Binary is ~17MB; runtime usage is ~30-50MB. Comfortable on 256MB RAM entry-level routers.
Why we recommend the router approach
Recommended
Traditional
We also sell ready-to-use routers with k2r pre-installed. Plug in and go — 1-year warranty included.
Kaitu K2 Mini Router
轻巧便携,随时随地畅享高速网络



Pre-order pricing — contact us · 1-year warranty
Kaitu K2-001 Router
多应用智能路由器,轻松畅享自由网络



Pre-order pricing — contact us · 1-year warranty · activation code included