| name | glinet |
| description | Configure and manage GL.iNet routers — VPN (WireGuard, OpenVPN, Tailscale), AdGuard Home, DNS, multi-WAN failover, drop-in gateway, firewall, and network modes. Use when setting up or configuring a GL.iNet router, travel router, or OpenWrt-based networking. Triggers on mentions of GL.iNet, GL-iNet, Flint, Beryl, Slate, Brume, Spitz, Mudi, Marble, travel router, WireGuard router, drop-in gateway. |
| allowed-tools | Read, Write, Edit, Glob, Grep, Bash, WebFetch |
GL.iNet Routers
Expert at configuring GL.iNet routers running firmware v4.x (OpenWrt-based).
Overview
- VPN Client/Server — WireGuard, OpenVPN with 10+ integrated providers, policy-based routing
- AdGuard Home — Built-in network-wide ad blocking on supported models
- Multi-WAN — Failover and load balancing across Ethernet, WiFi repeater, tethering, cellular
- Drop-in Gateway — Add VPN/AdGuard to existing network without replacing primary router
- Network Modes — Router, Access Point, Extender, Bridge, WDS
- Tailscale / ZeroTier — Mesh VPN integration for remote access
- Network Storage — USB/SD shared via Samba, WebDAV, DLNA
- LuCI — Full OpenWrt advanced configuration access
Quick Start
- Connect to router WiFi (SSID on bottom label, default key:
goodlife)
- Browse to
http://192.168.8.1
- Set admin password → configure internet connection
- Default ports: Web UI
80/443, DNS 53, WireGuard 51820
Core Concepts
VPN Dashboard — Central hub for managing VPN connections. Supports Global Mode (all traffic through one tunnel) and Policy Mode (up to 5 tunnels with per-device/per-domain routing rules). Kill switch blocks traffic if VPN drops.
Drop-in Gateway — Place GL.iNet router between existing router and devices. Adds VPN, AdGuard, encrypted DNS without changing existing network. Connect primary router LAN → GL.iNet WAN.
Network Modes — Router (default, full features), Access Point (wireless bridge, no NAT), Extender (wireless repeater), Bridge (transparent switch). Only Router mode supports VPN/AdGuard/firewall.
Documentation
- First Time Setup — Initial configuration guide
- Internet & WAN — Ethernet, repeater, tethering, cellular
- Wireless — WiFi bands, channels, security, mesh/MLO
- LAN & DNS — LAN settings, DHCP, DNS modes, encrypted DNS
- VPN Dashboard — Global/policy mode, kill switch, tunnels
- WireGuard — Client and server setup
- Tailscale — Mesh VPN remote access
- AdGuard Home — Built-in ad blocking setup
- Firewall & Security — Port forwarding, DMZ, firewall rules
- Network Modes — Router, AP, extender, bridge, WDS
- Drop-in Gateway — Add features to existing network
- Multi-WAN — Failover and load balancing
- Clients — Device management, speed limits, access control
- Network Storage — USB/Samba/WebDAV/DLNA
- Administration — Firmware upgrade, DDNS, LuCI, debrick
Common Workflows
Set up as drop-in gateway with AdGuard
- Connect primary router LAN → GL.iNet WAN
- Enable Drop-in Gateway in admin panel
- Set primary router DHCP gateway to GL.iNet WAN IP
- Enable AdGuard Home under Applications
Connect to VPN provider (WireGuard)
VPN → WireGuard Client → select provider (Mullvad, NordVPN, etc.) → enter credentials → select server → connect
Remote access via Tailscale
Applications → Tailscale → Enable → bind to Tailscale account → enable Allow Remote Access LAN → approve subnet routes in Tailscale admin
Upstream Sources
Sync & Update
When user runs sync: fetch latest from upstream, update docs/.
When user runs diff: compare current vs upstream, report changes.
