Wanderlink VPN
My Account

Setup Guide

Install Wanderlink on your home and travel devices. Choose the option that fits your hardware.

⚠️ No API Key Found — Get your device API key from the portal, then return here.
✓ API Key Loaded — Your key has been filled into all commands below. Just copy and paste!
1
Home Server

Install this on the device at home that will share your home IP address. Pick the option that matches your setup.

One command works everywhere — GL.iNet routers, Linux PCs, Raspberry Pi, and cloud VPS. The installer detects your platform automatically.
1. SSH in and run the installer
On a GL.iNet router: ssh root@192.168.8.1  ·  On Linux: run as root or with sudo.
curl -sSL https://wanderlinkvpn.com/downloads/install-server.sh | sh -s -- YOUR_API_KEY
2. That's it.
The script detects GL.iNet (OpenWrt) or Linux, downloads the right binary, configures the service, and starts it. Your home IP will appear in the portal within a minute.
Supported: GL.iNet routers (aarch64), Linux x86_64 and arm64. Using a VPS? Make sure UDP port 443 is open in your cloud firewall.
Runs the home server in a Docker container. Requires Docker with Compose v2 and a Linux host (not macOS Docker Desktop — it doesn't expose TUN devices).
1. Run the Docker setup script
curl -sSL https://wanderlinkvpn.com/downloads/install-docker-server.sh | sh -s -- YOUR_API_KEY
2. That's it.
The script creates ~/wanderlink-server/, downloads the binary, generates TLS certs, and starts the container. Use docker compose logs -f to watch it connect.
Manual control: cd ~/wanderlink-server && docker compose restart
Run the home server on a Mac Mini, iMac, or any always-on Mac. Uses native macOS utun interfaces — no Docker or VM needed.
1. Install the server
curl -sSL https://wanderlinkvpn.com/downloads/install-server.sh | sh -s -- YOUR_API_KEY
Downloads the binary to ~/.wanderlink/ and adds it to your PATH.
2. Run the server
sudo ~/.wanderlink/wanderlink-server
Requires sudo to create the TUN network interface. The server registers with the relay and waits for client connections.
3. Forward UDP port 443
On your home router, forward UDP port 443 to your Mac's local IP address. This enables direct connections (faster than relay). See the Home Network Setup section below.
Tip: To keep the server running after you close the terminal, use nohup:
sudo nohup ~/.wanderlink/wanderlink-server > /tmp/wanderlink.log 2>&1 &
Supported: macOS 13+ on Apple Silicon and Intel. Works on Mac Mini, iMac, MacBook (must stay open/awake), Mac Pro, Mac Studio.
★
Home Network Setup

Connect your Wanderlink server to your home network. Works with any router or ISP.

1. Plug your Wanderlink server into a LAN port on your home router
Connect your Brume 3 (or Linux server / Raspberry Pi) to any LAN port on your existing home router with an Ethernet cable. It gets an IP automatically via DHCP.
2. Run the installer (Step 1 above)
The server connects outbound to our cloud relay — it works automatically behind any firewall or NAT. No configuration needed on your home router.

Recommended: Port Forwarding for Direct Connections

For the best performance, forward UDP port 443 from your home router to your Wanderlink server. This lets your travel client connect directly — lower latency, faster speeds, and no relay bandwidth usage.

Don't want to set up port forwarding? That's fine — Wanderlink's relay handles NAT traversal automatically and your VPN will work without any router configuration. But direct connections are faster and recommended when possible.
1. Find your Wanderlink server's LAN IP address
Check your home router's DHCP client list (in the router admin page), or SSH into the Wanderlink server and run ip addr. It will be something like 192.168.1.50 or 192.168.0.129.
2. Log into your home router's admin panel
Open your browser and go to your router's IP — usually 192.168.1.1 or 192.168.0.1. Log in with your router admin password.
3. Add a port forwarding rule
Forward UDP port 443 to your Wanderlink server's IP address.
Protocol: UDP
External Port: 443
Internal IP: (your server's IP)
Internal Port: 443

Where to find Port Forwarding on your router

Most routers (including ISP routers like CenturyLink, Xfinity, AT&T):

  1. Log into your router at 192.168.1.1 or 192.168.0.1
  2. Look for Port Forwarding, Virtual Servers, or NAT/Gaming in the menu
  3. Common paths: Advanced → Port Forwarding, Firewall → Port Forwarding, or NAT → Virtual Servers
  4. Add a new rule: Protocol = UDP, Port = 443, IP = your Wanderlink server IP
  5. Save and apply

ISP router tip: Some ISP routers (CenturyLink, Xfinity) bury port forwarding under "Advanced Setup" or "Firewall" menus. If you can't find it, search your router model + "port forwarding" online.

ASUS routers (RT-AX, RT-AC, ROG series):

  1. Go to 192.168.1.1 or router.asus.com
  2. Navigate to WAN → Virtual Server / Port Forwarding
  3. Click Add Profile or the + button
  4. Set: Service Name = Wanderlink, Protocol = UDP, External Port = 443, Internal Port = 443, Internal IP = your Wanderlink server IP
  5. Click OK, then Apply

Netgear routers (Nighthawk, Orbi):

  1. Go to 192.168.1.1 or routerlogin.net
  2. Navigate to Advanced → Advanced Setup → Port Forwarding / Port Triggering
  3. Select Port Forwarding and click Add Custom Service
  4. Set: Service Name = Wanderlink, Protocol = UDP, External Starting/Ending Port = 443, Internal IP = your Wanderlink server IP, Internal Port = 443
  5. Click Apply
How to verify: After setting up port forwarding, check your portal. If your travel client shows "Direct connection" in the logs, port forwarding is working. If it says "Connected via relay", port forwarding isn't configured or your ISP is blocking UDP 443 — but the connection still works fine through the relay.
2
Travel Client

Install this on the device you'll travel with. It connects back to your home server so all your traffic uses your home IP.

One command installs the client, sets up auto-reconnect on WiFi changes, and routes all connected devices through your home IP.
1. Connect your travel router to the internet
Your GL.iNet router needs internet access first. The easiest way is to connect it to a hotel or cafe WiFi as a repeater.

How to connect to WiFi (Repeater mode):

  1. Power on your GL.iNet router and connect to it via WiFi or Ethernet
  2. Open 192.168.8.1 in your browser
  3. Go to Internet in the left menu
  4. Click Repeater (the WiFi icon)
  5. Click Scan to find nearby WiFi networks
  6. Select the hotel/cafe/hotspot WiFi and enter its password
  7. Click Join — wait for it to connect

Other options: You can also plug an Ethernet cable into the WAN port, or use USB tethering from your phone. Any internet source works.

2. Open a terminal on your GL.iNet router
From a computer: ssh root@192.168.8.1   ·   From a phone (on router WiFi): open 192.168.8.1 in browser, go to System → Terminal.
3. Run the installer
curl -sSL https://wanderlinkvpn.com/downloads/install-client.sh | sh -s -- YOUR_API_KEY
4. Done — all devices on this router now use your home IP.
The service starts automatically and reconnects if WiFi changes. When you move to a new hotel, just repeat Step 1 to connect to the new WiFi — Wanderlink reconnects automatically.
Supported: GL.iNet routers (Slate, Flint, Beryl, and others with aarch64 OpenWrt). Includes watchdog and hotplug auto-reconnect.
Installs as a systemd service. Only traffic explicitly routed through wander0 is tunneled — other traffic uses your normal connection.
1. Run as root or with sudo
curl -sSL https://wanderlinkvpn.com/downloads/install-client.sh | sh -s -- YOUR_API_KEY
2. Verify the tunnel is up
curl --interface wander0 https://ipinfo.io/ip
Supported: Linux x86_64 and arm64 (Ubuntu, Debian, etc). Requires systemd.
Two options: a menu bar app (recommended) or a command-line install. Both create a full tunnel using macOS utun devices.

Option A: Menu Bar App (recommended)

1. Download Wanderlink
2. Open the DMG and drag Wanderlink to Applications
3. Launch Wanderlink from Applications
It appears in your menu bar as a shield icon. Enter your API key in Settings, then click Connect. A one-time admin prompt installs a helper so future connects don't need a password.

Option B: Command Line

1. Run the installer
curl -sSL https://wanderlinkvpn.com/downloads/install-client.sh | sh -s -- YOUR_API_KEY
2. Connect
wanderlink
Requires sudo (creates a TUN network interface). Press Ctrl+C to disconnect — routes are cleaned up automatically.
Supported: macOS 13+ on Apple Silicon and Intel. The app runs in the menu bar (no dock icon). To uninstall: Settings → Uninstall, or install-client.sh --uninstall.
📱

iOS & Android — Coming Soon

Native mobile apps are planned. For now, travel with a GL.iNet router or Linux laptop to get your home IP on mobile devices through the router.

3
Verify

Check that everything is connected

After installing on both devices, confirm the tunnel is working:

# On a GL.iNet router: check service and logs
/etc/init.d/wanderlink status
tail -f /tmp/wanderlink.log

# On Linux (systemd): check service and logs
systemctl status wanderlink-server   # or wanderlink-client
journalctl -u wanderlink-server -f

# Check tunnel interface is up
ip addr show wander0

# Test your home IP (from travel device)
curl --interface wander0 https://ipinfo.io/ip

You should see:

  • Service is active and running
  • Home server log shows "Registered with relay"
  • Travel client log shows "Connected" or "Direct connection established"
  • Tunnel interface wander0 has an IP (10.254.254.x)
  • IP check shows your home IP address

Or just check your account portal — it shows your home server's last-seen status.

← Back to Home My Account →