How do I configure a Keenetic router for selective block bypassing via VLESS?

INSTALL THE ENTWARE PACKAGE, SET UP THE XRAY CLIENT, AND CONFIGURE ROUTING LISTS.

Standard router firmware does not always support modern camouflage protocols out of the box. Deploying an additional environment allows you to run the Xray client and route only blocked domains through the encrypted tunnel without slowing down the rest of your sites.

The Principle of Selective Routing on a Router

To ensure your home network doesn't lose access speed to local resources, the router splits outbound requests using iptables or nftables firewall rules. All direct traffic goes through the standard ISP interface, while packets destined for problematic addresses are transparently redirected to the local Xray socket running VLESS Reality.

Setup Procedure on Home Equipment

Connect an external storage drive and deploy the Entware package environment in the router control panel.
Install the Xray or Sing-box core binary via the router command line.
Download up-to-date lists of blocked IP ranges and domain zones.
Set up automatic service restart in case of internet drops or device reboots.