Skip to content
Tayra

All guides

GL.iNet router

Updated October 24, 2026

Beta: this way of connecting is not checked on real devices yet. If it does not work, write to support — we will help and fix the guide.

The router connects over WireGuard and counts as one device of your plan. You set it up once; later you change the country for the whole home from your account, without touching the router.

Get the config

  1. Sign in to your Tayra account, open Devices and choose Connect a device.
  2. Choose Router (beta), the firmware GL.iNet and the Entry country (or leave Chosen by the service).
  3. Tap Create the config and download the .conf file. It has the private key of the router and is shown only once.

Load it into the router

In the router web interface, open VPN → WireGuard Client, add a configuration from the file and connect. GL.iNet translates addresses of home devices (NAT) for this connection itself.

Leak protection: turn it on yourself

The .conf file sets up only the tunnel. It cannot forbid traffic outside the VPN: these are settings of the GL.iNet itself. Without them, when the tunnel fails, home devices go to the internet directly through your provider, and IPv6 from your provider can go outside the VPN. The names of menu items can differ between firmware versions.

  1. Only through the VPN. In VPN → VPN Dashboard, turn on Block Non-VPN Traffic: when the tunnel fails, home devices have no internet instead of a direct connection.
  2. IPv6. IPv6 is not carried through the tunnel yet. If your provider gives you IPv6, turn it off in Network → IPv6.
  3. DNS. In Network → DNS, do not let your own DNS servers override the VPN DNS: then queries go to the VPN DNS from the file.
  4. Check. On a device in the home network, open a DNS and IP leak test site: only the address and DNS of the VPN must be visible. Then disconnect WireGuard Client: the device must have no internet.

Good to know