KeenProxy is a tool for managing network traffic and routing on Keenetic routers, built on the sing-box engine. The project is open-source under the GPL-3.0-only license. Users can configure routing rules for specific devices or subnets via a web interface, supporting domains, IP addresses, and GeoIP-based country rules.
The service uses Go to convert YAML configurations into iptables interception rules. It supports TCP redirection and TPROXY for UDP traffic. Version 0.8.0 introduced an optional NDM netfilter hook that restores firewall rules if they are overwritten by the firmware, with a watchdog mechanism checking rules every 30 seconds.
The software includes diagnostic tools, such as connection testing and the ability to export anonymized logs and settings for troubleshooting. KeenProxy primarily supports Keenetic and Netcraze devices with Entware, offering builds for ARM64 and MIPS architectures.
Experimental support for OpenWrt is available starting from version 0.6.0. It requires at least 128 MiB of RAM and sufficient storage space. The developers are currently testing compatibility with various hardware, including MikroTik hAP ac, and are gathering feedback on performance and interception modes.
