Backup functionality will be available after system configuration is complete.
Disk Management
Disk Usage
-
Expand Partition
Interfaces
Name
Type
State
IP Address
MAC
MTU
RX / TX
Description
Bridge Settings
Bridge Ports
IP Address
MTU
MAC
DHCP Server
Pool Offset
Pool Size
Legacy DNS
Lease Time (sec)
DNS and traffic policy for this interface
Enter each DNS server in a separate field. Up to four addresses can be added.
This policy is saved separately and does not yet change DNS, DHCP, or DPI.
Port Settings
Connection Mode
MTU
MAC
Provider VLAN
0 = untagged
IP Address
Gateway
Legacy DNS
DHCP Server
Pool Offset
Pool Size
Legacy DNS (DHCP)
Gateway (DHCP)
Lease Time (sec)
PPPoE Login
PPPoE Password
MTU
L2TP Server
L2TP Login
L2TP Password
DNS and traffic policy for this interface
Enter each DNS server in a separate field. Up to four addresses can be added.
Enable only on interfaces that carry traffic out to the internet. It does not apply to LAN, bridge, or internal VLAN interfaces.
This policy is saved separately and does not yet change DNS, DHCP, or DPI.
VLAN List
VLAN ID
Connection Mode
IP Address
DHCP Server
State
Add VLAN
VLAN ID
Connection Mode
IP Address
DHCP Server
Pool Offset
Pool Size
Legacy DNS (DHCP)
Gateway (DHCP)
Lease Time (sec)
⚠️ Incorrect changes may make the device unavailable.
VPN
AmneziaWG client tunnels
Name
State
Endpoint
RX / TX
Autostart
Add tunnel
Name
Format
Configuration
URI
Default gateway
Route metric
0 = highest priority
Autostart
Applying changes will briefly stop and restart this active tunnel. If startup fails, the previous configuration will be restored automatically.
Default gateway
Route metric
0 = highest priority
AmneziaWG Server
Coming soon...
OpenVPN Server
PKI
-
State
-
Generating CA and DH parameters may take 1–2 minutes.
Server settings
Port
Protocol
Subnet
Clients
Name
.ovpn
Connected clients
Name
IP
RX/TX
Connected since
Routes
Current Linux state. This stage is read-only.
Routing tables
ID
Name
Family
Source
Routes
Routes
Family
Table
Destination
Gateway
Interface
Protocol
Metric
Policy rules
Family
Priority
From
To
Fwmark
Table
Action
Secure DNS
Checking changes nothing. Save and apply activates DNS and its routing.
How it works
The router validates DNSSEC. Preset resolvers use authenticated DoT. Queries use the first available egress in the list and fail over automatically.
For custom DNS, DNSSEC validates the answer while a VPN protects the path. A direct interface is a fallback, but plain DNS through it is not encrypted.
Module package
-
Runtime
-
Saved source
-
Protected DNS servers
DNS source
DNS provider
DNS IP addresses
Enter each DNS server in a separate field. Up to four addresses can be added.
Selected IP addresses
1.1.1.1, 1.0.0.1
Failover DNS routes
Select VPN tunnels and interfaces in order. DNS uses the first available path; arrows change priority.
Loading interfaces…
Current DNS route
Health is checked end to end. Manual selection still fails over if the selected path becomes unavailable.
Loading…
Technical details
SHA-256
-
Activation
Not applied
This check is diagnostic. Its result never blocks saving or applying.
Octava Connect