# VPN, DNS, Leaks **URL:** https://forum.gl-inet.com/c/glrouter/vpn/19.md [Latest](https://forum.gl-inet.com/latest.md) · [Categories](https://forum.gl-inet.com/categories.md) · [Tags](https://forum.gl-inet.com/tags.md) --- ## [About the VPN, DNS, Leaks category](https://forum.gl-inet.com/t/about-the-vpn-dns-leaks-category/28225)
**Author:** [@alzhao](https://forum.gl-inet.com/u/alzhao)\ **Replies:** 1\ **Last updated:** [February 23, 2024, 3:23pm UTC](https://forum.gl-inet.com/t/about-the-vpn-dns-leaks-category/28225 "2024-02-23T15:23:50Z")
All about OpenVpn, Wireguard, VPN policies, Data Leaks, DNS Leaks Please describe your issues with Router model Router firmware Detailed steps to replicate the issue --- ## [Beryl 7 adguard failure](https://forum.gl-inet.com/t/beryl-7-adguard-failure/72667)
**Author:** [@EliEli](https://forum.gl-inet.com/u/EliEli)\ **Replies:** 2\ **Last updated:** [November 6, 2026, 10:19pm UTC](https://forum.gl-inet.com/t/beryl-7-adguard-failure/72667 "2026-11-06T22:19:07Z")
Hello, I own several devices (four Mangos, one Opal, a Beryl AX and now a Beryl 7 as well). These devices are literally scattered around the world: my parents and my parents-in-law live in different countries, while I l… --- ## [BE9300 4.10.1: port forwards fail with VPN client + Tailscale (port\_forward mark 0x10000 is inside Tailscale's 0xff0000 range)](https://forum.gl-inet.com/t/be9300-4-10-1-port-forwards-fail-with-vpn-client-tailscale-port-forward-mark-0x10000-is-inside-tailscales-0xff0000-range/72668)
**Author:** [@suprasannaojha](https://forum.gl-inet.com/u/suprasannaojha)\ **Replies:** 0\ **Last updated:** [November 6, 2026, 7:21pm UTC](https://forum.gl-inet.com/t/be9300-4-10-1-port-forwards-fail-with-vpn-client-tailscale-port-forward-mark-0x10000-is-inside-tailscales-0xff0000-range/72668 "2026-11-06T19:21:13Z")
I started to have this problem after I updated my Flint 3 to firmware 4.10.1. With the help of Claude, I found the root cause that I describe below. For now, I added a workaround on my router, but an official fix in the … --- ## [VPN Tunnels based on PIA stop working](https://forum.gl-inet.com/t/vpn-tunnels-based-on-pia-stop-working/70257)
**Author:** [@WizMeister](https://forum.gl-inet.com/u/WizMeister)\ **Replies:** 9\ **Last updated:** [November 6, 2026, 12:05pm UTC](https://forum.gl-inet.com/t/vpn-tunnels-based-on-pia-stop-working/70257 "2026-11-06T12:05:48Z")
We have set up a VPN tunnel that forwards traffic through a specific PIA country (set up via the gl-inet PIA menu). When that server gets stale, the tunnel stops working, and we have to enter the PIA menu, refresh the … --- ## [GL-BE9300 4.10.1: every IPv6 RA on WAN reloads firewall + network and flushes the whole conntrack table (VPN policy enabled)](https://forum.gl-inet.com/t/gl-be9300-4-10-1-every-ipv6-ra-on-wan-reloads-firewall-network-and-flushes-the-whole-conntrack-table-vpn-policy-enabled/71714)
**Author:** [@kugaevsky](https://forum.gl-inet.com/u/kugaevsky)\ **Replies:** 4\ **Last updated:** [November 6, 2026, 11:17am UTC](https://forum.gl-inet.com/t/gl-be9300-4-10-1-every-ipv6-ra-on-wan-reloads-firewall-network-and-flushes-the-whole-conntrack-table-vpn-policy-enabled/71714 "2026-11-06T11:17:52Z")
Device: GL-BE9300 (Flint 3), firmware 4.10.1 (build 2026-09-18), OpenWrt 23.05 / QSDK, fw4. Setup: IPv6 enabled on WAN (mode NAT6, wan6 = DHCPv6 on WAN) behind an ISP ONT that sends periodic Router Advertisements; VPN p… --- ## [Cannot Setup Wireguard Server](https://forum.gl-inet.com/t/cannot-setup-wireguard-server/72580)
**Author:** [@cussonng](https://forum.gl-inet.com/u/cussonng)\ **Replies:** 3\ **Last updated:** [November 6, 2026, 3:42am UTC](https://forum.gl-inet.com/t/cannot-setup-wireguard-server/72580 "2026-11-06T03:42:53Z")
I am using Flint 2 with firmware v.4.11. When I tried to setup the Wireguard Server, it shows only "Applied!" on the screen, and then it stays to the same screen, there is no any configuration page shown up. This proble… --- ## [Flint 4 BE-14000 Discussion Thread](https://forum.gl-inet.com/t/flint-4-be-14000-discussion-thread/70944)
**Author:** [@Galenjohn](https://forum.gl-inet.com/u/Galenjohn)\ **Replies:** 200\ **Last updated:** [November 5, 2026, 2:19pm UTC](https://forum.gl-inet.com/t/flint-4-be-14000-discussion-thread/70944 "2026-11-05T14:19:57Z")
Finally I received my Flint 4. DHL refused to deliver it on Saturday (more than 90% of their shipments they won’t deliver in the weekend just saying I was not at home). Package was a tiny bit damaged but the inside was… --- ## [Fails to parse wireguard "Endpoint" config file entry](https://forum.gl-inet.com/t/fails-to-parse-wireguard-endpoint-config-file-entry/72386)
**Author:** [@okram](https://forum.gl-inet.com/u/okram)\ **Replies:** 4\ **Last updated:** [November 5, 2026, 10:59am UTC](https://forum.gl-inet.com/t/fails-to-parse-wireguard-endpoint-config-file-entry/72386 "2026-11-05T10:59:23Z")
I have a Velica router and want to configure the wireguard VPN. \[Interface\] Address = 10.120.1.106/32 DNS = 8.8.8.8 PrivateKey = \[Peer\] PublicKey = Endpoint = de-fr.boxpnservers.com:48020 AllowedIPs = 0.0.0.0/0, ::/0… --- ## [GL-BE14000 (Flint 4) – Full Cone NAT not working as expected and Manual DNS (Quad9) issues on firmware 4.11.0 Beta 6](https://forum.gl-inet.com/t/gl-be14000-flint-4-full-cone-nat-not-working-as-expected-and-manual-dns-quad9-issues-on-firmware-4-11-0-beta-6/72624)
**Author:** [@bakaran](https://forum.gl-inet.com/u/bakaran)\ **Replies:** 0\ **Last updated:** [November 5, 2026, 8:07am UTC](https://forum.gl-inet.com/t/gl-be14000-flint-4-full-cone-nat-not-working-as-expected-and-manual-dns-quad9-issues-on-firmware-4-11-0-beta-6/72624 "2026-11-05T08:07:34Z")
Hello GL.iNet Team, I would like to report two issues with my GL.iNet Flint 4 (GL-BE14000), currently running firmware 4.11.0 Beta 6. I have investigated both issues using SSH, OpenWrt configuration checks, nftables di… --- ## [Brume 3 ethernet link dropping](https://forum.gl-inet.com/t/brume-3-ethernet-link-dropping/72499)
**Author:** [@gsoul](https://forum.gl-inet.com/u/gsoul)\ **Replies:** 1\ **Last updated:** [November 5, 2026, 8:03am UTC](https://forum.gl-inet.com/t/brume-3-ethernet-link-dropping/72499 "2026-11-05T08:03:56Z")
I've been using the Brume 3 has a vpn server for over 6 months. Everything has been working perfectly. A little over a week ago, my vpn connection would consistently disconnect. I initially through it was my client rout… --- ## [IPv6 over VPN works on the router but not for LAN clients (NAT6 / VPN Policy Routing issue)](https://forum.gl-inet.com/t/ipv6-over-vpn-works-on-the-router-but-not-for-lan-clients-nat6-vpn-policy-routing-issue/72556)
**Author:** [@MrFOX](https://forum.gl-inet.com/u/MrFOX)\ **Replies:** 1\ **Last updated:** [November 5, 2026, 7:57am UTC](https://forum.gl-inet.com/t/ipv6-over-vpn-works-on-the-router-but-not-for-lan-clients-nat6-vpn-policy-routing-issue/72556 "2026-11-05T07:57:31Z")
Hello GL.iNet team! I've encountered an issue with IPv6 routing through a VPN tunnel on a GL.iNet Brume MT5000. Network configuration: Router: GL.iNet Brume MT5000 VPN: AmneziaWG (WireGuard-compatible) VPN int… --- ## [Flint 2 MT-6000 - Domain-Based VPN Policy broken on Flint 2 after update to 4.11.0](https://forum.gl-inet.com/t/flint-2-mt-6000-domain-based-vpn-policy-broken-on-flint-2-after-update-to-4-11-0/72412)
**Author:** [@myrouter](https://forum.gl-inet.com/u/myrouter)\ **Replies:** 2\ **Last updated:** [November 4, 2026, 11:10am UTC](https://forum.gl-inet.com/t/flint-2-mt-6000-domain-based-vpn-policy-broken-on-flint-2-after-update-to-4-11-0/72412 "2026-11-04T11:10:21Z")
Summary Since updating my Flint 2 from 4.8.x to 4.11.0, the Domain-Based VPN Policy no longer behaves as it did before. Instead of letting non-VPN traffic through, the policy blocks everything on the LAN that is not i… --- ## [Server to Client VPN routing - Help Needed](https://forum.gl-inet.com/t/server-to-client-vpn-routing-help-needed/72365)
**Author:** [@JSHono](https://forum.gl-inet.com/u/JSHono)\ **Replies:** 4\ **Last updated:** [November 4, 2026, 10:30am UTC](https://forum.gl-inet.com/t/server-to-client-vpn-routing-help-needed/72365 "2026-11-04T10:30:34Z")
Hello. I would appreciate any assistance in setting up a WireGuard VPN network. I have installed two GL.iNet MT2500 routers and one TPLink MESH Router. Router 1 (GL.iNet MT2500) is the gateway for my company network. T… --- ## [Mudi 7 trouble with ftp](https://forum.gl-inet.com/t/mudi-7-trouble-with-ftp/72248)
**Author:** [@nick1](https://forum.gl-inet.com/u/nick1)\ **Replies:** 14\ **Last updated:** [November 4, 2026, 2:12am UTC](https://forum.gl-inet.com/t/mudi-7-trouble-with-ftp/72248 "2026-11-04T02:12:28Z")
Hello, I have a specific situation that is not working. Wondering if anyone has any insight. All firmware is up to date. 4.10. and these exact devices work flawlessly on any of my unifi routers. I have 3 devices on the … --- ## [Opal using VPN DNS even with "Allow Custom DNS to Override VPN DNS" enabled](https://forum.gl-inet.com/t/opal-using-vpn-dns-even-with-allow-custom-dns-to-override-vpn-dns-enabled/72271)
**Author:** [@felling.vriar](https://forum.gl-inet.com/u/felling.vriar)\ **Replies:** 4\ **Last updated:** [November 3, 2026, 11:52am UTC](https://forum.gl-inet.com/t/opal-using-vpn-dns-even-with-allow-custom-dns-to-override-vpn-dns-enabled/72271 "2026-11-03T11:52:45Z")
Hello, I have the following setup: Flint connected to internet, local IP at 192.168.8.1, with "Override DNS Settings for All Clients" enabled, and custom DNS servers 192.168.8.164 and .103 specified. These servers are b… --- ## [\[BUG\] GL-BE3600 4.10.1: dnsproxy.yaml left empty after power loss, Encrypted DNS never recovers](https://forum.gl-inet.com/t/bug-gl-be3600-4-10-1-dnsproxy-yaml-left-empty-after-power-loss-encrypted-dns-never-recovers/72436)
**Author:** [@gh0stx](https://forum.gl-inet.com/u/gh0stx)\ **Replies:** 1\ **Last updated:** [November 2, 2026, 7:57am UTC](https://forum.gl-inet.com/t/bug-gl-be3600-4-10-1-dnsproxy-yaml-left-empty-after-power-loss-encrypted-dns-never-recovers/72436 "2026-11-02T07:57:36Z")
Device: GL-BE3600, firmware 4.10.1 release1 (2026-09-18 20:51:02), OpenWrt 23.05-SNAPSHOT r0-3601c2a49, kernel 5.4.213. Uplink: repeater (wwan). DNS settings: gl-dns-v2.@dns\[0\].mode='secure' gl-dns-v2.@dns\[0\].provider=… --- ## [Flint 2 (GL-MT6000) WireGuard Client: startup-connecting-timeout loop on all PIA servers except Singapore](https://forum.gl-inet.com/t/flint-2-gl-mt6000-wireguard-client-startup-connecting-timeout-loop-on-all-pia-servers-except-singapore/72005)
**Author:** [@Tseb](https://forum.gl-inet.com/u/Tseb)\ **Replies:** 8\ **Last updated:** [November 2, 2026, 2:51am UTC](https://forum.gl-inet.com/t/flint-2-gl-mt6000-wireguard-client-startup-connecting-timeout-loop-on-all-pia-servers-except-singapore/72005 "2026-11-02T02:51:07Z")
Hi everyone, I am having a frustrating issue with Private Internet Access (PIA) WireGuard on my \*\*GL-MT6000 (Flint 2)\*\*running firmware v4.11.0. My internet connection is completely fine, and my phone connects to all P… --- ## [Proton VPN server picker for GL-MT3000 (fw 4.11): unofficial, open source](https://forum.gl-inet.com/t/proton-vpn-server-picker-for-gl-mt3000-fw-4-11-unofficial-open-source/72480)
**Author:** [@glutio](https://forum.gl-inet.com/u/glutio)\ **Replies:** 1\ **Last updated:** [November 2, 2026, 1:58am UTC](https://forum.gl-inet.com/t/proton-vpn-server-picker-for-gl-mt3000-fw-4-11-unofficial-open-source/72480 "2026-11-02T01:58:54Z")
I wanted to pick Proton VPN servers directly on my GL-MT3000 instead of downloading WireGuard configs one by one, so I built a small add-on: What it does • Adds VPN → Proton VPN to the admin panel • Sign in with … --- ## [Add support for AmneziaWG 3.1 to GL-MT3000 on next beta firmware](https://forum.gl-inet.com/t/add-support-for-amneziawg-3-1-to-gl-mt3000-on-next-beta-firmware/72468)
**Author:** [@CaptainSugar](https://forum.gl-inet.com/u/CaptainSugar)\ **Replies:** 4\ **Last updated:** [November 2, 2026, 1:52am UTC](https://forum.gl-inet.com/t/add-support-for-amneziawg-3-1-to-gl-mt3000-on-next-beta-firmware/72468 "2026-11-02T01:52:10Z")
Hello! The AmneziaVPN protocol was updated to AmneziaWG version 3.1 today. I have a Beryl AX (GL-MT3000), and I would like to see support for the AmneziaVPN 3.1 protocol in the next beta firmware. Thank you in advance! … --- ## [Anyone using Unbound on a Flint 3? Question about package updates](https://forum.gl-inet.com/t/anyone-using-unbound-on-a-flint-3-question-about-package-updates/72478)
**Author:** [@Pechivko](https://forum.gl-inet.com/u/Pechivko)\ **Replies:** 3\ **Last updated:** [October 31, 2026, 11:47pm UTC](https://forum.gl-inet.com/t/anyone-using-unbound-on-a-flint-3-question-about-package-updates/72478 "2026-10-31T23:47:07Z")
Hi everyone, Has anyone here been running AdGuard Home + Unbound on a Flint 3 with stock firmware? I currently have Pi-hole + Unbound on a Raspberry Pi and am thinking about moving DNS to the router to free up the Pi f… --- ## [Drops (PS5) & SQM/Bufferbloat Not Working (PC) – GL-MT6000 (Vanilla OpenWrt)](https://forum.gl-inet.com/t/drops-ps5-sqm-bufferbloat-not-working-pc-gl-mt6000-vanilla-openwrt/72414)
**Author:** [@sulo](https://forum.gl-inet.com/u/sulo)\ **Replies:** 2\ **Last updated:** [October 30, 2026, 11:54pm UTC](https://forum.gl-inet.com/t/drops-ps5-sqm-bufferbloat-not-working-pc-gl-mt6000-vanilla-openwrt/72414 "2026-10-30T23:54:45Z")
Iam using the GL.iNet Flint 2 (GL-MT6000) on Vanilla OpenWrt and facing two main issues on wired connections: ​PS5 UDP Drops: Frequent "Lost connection to server" disconnections during active online gameplay. ​Bufferbl… --- ## [DNS & Tailscale Issue](https://forum.gl-inet.com/t/dns-tailscale-issue/72421)
**Author:** [@hamkers](https://forum.gl-inet.com/u/hamkers)\ **Replies:** 1\ **Last updated:** [October 29, 2026, 11:52am UTC](https://forum.gl-inet.com/t/dns-tailscale-issue/72421 "2026-10-29T11:52:05Z")
I've been having issues with getting adguard to perform DNS rewrites to resolve mydomain.com to the IP address of my NAS over tailscale. Everything works fine locally but when tailscale is enabled over my phone's network… --- ## [\[BUG\] GL-E5800 Mudi 7 — LAN DHCP DNS setting is lost after reboot](https://forum.gl-inet.com/t/bug-gl-e5800-mudi-7-lan-dhcp-dns-setting-is-lost-after-reboot/70682)
**Author:** [@Motobyte](https://forum.gl-inet.com/u/Motobyte)\ **Replies:** 10\ **Last updated:** [October 27, 2026, 10:43am UTC](https://forum.gl-inet.com/t/bug-gl-e5800-mudi-7-lan-dhcp-dns-setting-is-lost-after-reboot/70682 "2026-10-27T10:43:28Z")
\[BUG\] GL-E5800 Mudi 7 — LAN DHCP DNS setting is lost after reboot Summary On a GL.iNet Mudi 7 (GL-E5800), a custom DNS server entered in the LAN DHCP settings is saved and active before reboot. After reboot, DHCP option … --- ## [Flint 4 OpenWRT vanilla](https://forum.gl-inet.com/t/flint-4-openwrt-vanilla/71383)
**Author:** [@username89](https://forum.gl-inet.com/u/username89)\ **Replies:** 17\ **Last updated:** [October 26, 2026, 8:37pm UTC](https://forum.gl-inet.com/t/flint-4-openwrt-vanilla/71383 "2026-10-26T20:37:52Z")
Hey GL.iNet Team, I'm an early bird Flint 4 owner who pre-ordered based on "OpenWrt support" marketing which has since vanished and replaced with Multi WAN support. I have specific questions: Can you identify from se… --- ## [Core Issue: MediaTek Hardware Acceleration Conflict under IPV6 with Router Flint 4 And SFP+ module](https://forum.gl-inet.com/t/core-issue-mediatek-hardware-acceleration-conflict-under-ipv6-with-router-flint-4-and-sfp-module/72083)
**Author:** [@Kaneda](https://forum.gl-inet.com/u/Kaneda)\ **Replies:** 6\ **Last updated:** [October 26, 2026, 11:11am UTC](https://forum.gl-inet.com/t/core-issue-mediatek-hardware-acceleration-conflict-under-ipv6-with-router-flint-4-and-sfp-module/72083 "2026-10-26T11:11:44Z")
Hello everyone. I have recently identified an issue that causes the IPv6 connection to fail or stall within the hardware acceleration engine (PPE) of the MediaTek Filogic processor in the Flint 4 router—specifically whe… --- ## [Dnscrypt-proxy-vpn not automatically starting](https://forum.gl-inet.com/t/dnscrypt-proxy-vpn-not-automatically-starting/72231)
**Author:** [@siw2009](https://forum.gl-inet.com/u/siw2009)\ **Replies:** 5\ **Last updated:** [October 26, 2026, 8:15am UTC](https://forum.gl-inet.com/t/dnscrypt-proxy-vpn-not-automatically-starting/72231 "2026-10-26T08:15:48Z")
Hello. I am currently using GL-SFT1200 with firmware v4.8.3 and the vpn's dnscrypt service doesn't automatically restart. The normal dnscrypt-proxy service works flawlessly, but except the dnscrypt-proxy-vpn. As far as … --- ## [\[BUG\] Beryl 7 (GL-MT3600BE) FW 4.9.0 – WireGuard GRO causes TLS download failures (workaround found)](https://forum.gl-inet.com/t/bug-beryl-7-gl-mt3600be-fw-4-9-0-wireguard-gro-causes-tls-download-failures-workaround-found/72266)
**Author:** [@aberyluser](https://forum.gl-inet.com/u/aberyluser)\ **Replies:** 1\ **Last updated:** [October 26, 2026, 6:44am UTC](https://forum.gl-inet.com/t/bug-beryl-7-gl-mt3600be-fw-4-9-0-wireguard-gro-causes-tls-download-failures-workaround-found/72266 "2026-10-26T06:44:43Z")
Summary I discovered a reproducible issue on the GL.iNet Beryl 7 (GL-MT3600BE), firmware 4.9.0, where HTTPS downloads fail when using the router's built-in WireGuard client. The issue affects different client devices an… --- ## [Sky FTTP via BT ONT Dropping WAN Connection When IP Renews](https://forum.gl-inet.com/t/sky-fttp-via-bt-ont-dropping-wan-connection-when-ip-renews/72176)
**Author:** [@MrListerSir](https://forum.gl-inet.com/u/MrListerSir)\ **Replies:** 3\ **Last updated:** [October 24, 2026, 2:38am UTC](https://forum.gl-inet.com/t/sky-fttp-via-bt-ont-dropping-wan-connection-when-ip-renews/72176 "2026-10-24T02:38:53Z")
I have this issue when Sky renews my public facing IP roughly every 56 days and if I am not around the Flint2 router will fail to re-negotiate a new IP and stay in the 100.x.x.x range. I have come across a potential wor… --- ## [Gl-X2000 - VPN reduces speed](https://forum.gl-inet.com/t/gl-x2000-vpn-reduces-speed/70769)
**Author:** [@MaVster](https://forum.gl-inet.com/u/MaVster)\ **Replies:** 15\ **Last updated:** [October 23, 2026, 11:04am UTC](https://forum.gl-inet.com/t/gl-x2000-vpn-reduces-speed/70769 "2026-10-23T11:04:33Z")
Hello, I am having a problem with the router, where I normally get around 700 Mbs in download through the wan port connected to an external 5g antenna. If I turn on VPN only to a specific device policy or to a specific n… --- ## [Slow DNS resovling with policy routing](https://forum.gl-inet.com/t/slow-dns-resovling-with-policy-routing/72197)
**Author:** [@nankey](https://forum.gl-inet.com/u/nankey)\ **Replies:** 1\ **Last updated:** [October 23, 2026, 8:26am UTC](https://forum.gl-inet.com/t/slow-dns-resovling-with-policy-routing/72197 "2026-10-23T08:26:14Z")
I am encountering slow (~2ms more latency per query, bearable) DNS lookup on Flint 4 with 29k domain entries in VPN policy. I checked repo gl-inet/gl-image, branch gl-be14000, versions/4.9.1/package/kernel/glinet/gl-sdk… [Next page](https://forum.gl-inet.com/c/glrouter/vpn/19.md?page=1)