Keenetic routers can connect to Trust.Zone over AmneziaWG - WireGuard with traffic obfuscation, so the connection keeps working where plain WireGuard is blocked.

You need KeeneticOS 4.2 or newer. The router firmware version is shown on the System dashboard page of the web interface.

Step 1

Download the configuration file for the country you want to connect to:
WireGuard (.conf) file for Amnezia: HIDDEN. Log in or Sign up to see.

Before downloading, choose the obfuscation version: 30 if your router supports AmneziaWG 3.0, or 20 for AmneziaWG 2.0.
Keep the port 1194.

Step 2

Open the web interface of your router and go to Internet > Other connections.
In the WireGuard section click Load from file and select the file you have just downloaded.
Keenetic has no separate AmneziaWG section: obfuscated connections are imported in the WireGuard section as well.

Step 3

Open the connection that has been created and make sure that Use for accessing the Internet is enabled.
Check that MTU is set to 1360.

Step 4

Go to Network rules > Connection priorities, create a profile with this connection and assign the devices that should use the VPN to it.
Without this step the tunnel comes up, but the traffic of your devices still goes past it.

Step 5

In the connection settings specify the DNS servers, for example 9.9.9.9 and 149.112.112.112.
Otherwise the router keeps asking the DNS servers of your Internet provider, bypassing the tunnel.

Step 6

The connection list now shows the time of the last handshake - this means that the tunnel is up.
If the router rejects the file with an error about an invalid parameter, its firmware supports an earlier version of the protocol only: download the configuration again, choosing version 2 or 3.

Connection check

Open Trust.Zone Main page or reload it if it is already open in order to check if your connection with Trust.Zone VPN is established correctly.
You can also visit our Connection Check Page.