AmneziaWG on OpenWrt

OpenWrt-specific layer only: packages, UCI/LuCI names, router runtime and diagnostics. What each obfuscation parameter means and which values to choose → amnezia-vpn (awg-protocol.md, awg-config.md). Do not duplicate it here.

Upstream: Slava-Shchipunov/awg-openwrt @ 03b6226 (2026-09-23, AWG 3.1). amnezia-vpn/amneziawg-openwrt is abandoned since 2024-03 (AWG 1.0 only). Verified 2026-10-15.

Workflow

1. Read-only first: OpenWrt version (/etc/openwrt_release), package manager (apk on 25.x, opkg on ≤24.10), installed kmod-amneziawg/amneziawg-tools/luci-proto-amneziawg versions → references/build-and-debug.md.
2. Protocol version the packages support (3.1 needs builds v24.10.8 / v25.12.5+) must be ≥ the parameters in the config.
3. Map the server/client config to UCI options → references/uci-model.md; choose values with amnezia-vpn.
4. Diagnose: kernel vs userspace, logread, awg show with keys filtered, handshake → references/build-and-debug.md.
5. Changes to interfaces, peers, keys or packages only with explicit approval; back up /etc/config/network first.

Key facts