Keenetic routers can connect to Trust.Zone over AmneziaWG - WireGuard with traffic obfuscation, so the connection keeps working where plain WireGuard is blocked.

You need KeeneticOS 4.2 or newer. The router firmware version is shown on the System dashboard page of the web interface.

步骤 1

Download the configuration file for the country you want to connect to:
WireGuard（.conf）文件（适用于 Amnezia）: 已隐藏. 登录或注册后可见。

Before downloading, choose the obfuscation version: 30 if your router supports AmneziaWG 3.0, or 20 for AmneziaWG 2.0.
Keep the port 1194.

步骤 2

Open the web interface of your router and go to Internet > Other connections.
In the WireGuard section click Load from file and select the file you have just downloaded.
Keenetic has no separate AmneziaWG section: obfuscated connections are imported in the WireGuard section as well.

步骤 3

Open the connection that has been created and make sure that Use for accessing the Internet is enabled.
Check that MTU is set to 1360.

步骤 4

Go to Network rules > Connection priorities, create a profile with this connection and assign the devices that should use the VPN to it.
Without this step the tunnel comes up, but the traffic of your devices still goes past it.

步骤 5

In the connection settings specify the DNS servers, for example 9.9.9.9 and 149.112.112.112.
Otherwise the router keeps asking the DNS servers of your Internet provider, bypassing the tunnel.

步骤 6

The connection list now shows the time of the last handshake - this means that the tunnel is up.
If the router rejects the file with an error about an invalid parameter, its firmware supports an earlier version of the protocol only: download the configuration again, choosing version 2 or 3.

连接检测

打开 Trust.Zone 首页（如果已经打开，请刷新），确认与 Trust.Zone VPN 的连接是否正常建立。
您也可以访问我们的连接检测页面。