NordVPN introduces a headless package for OpenWrt routers

What is OpenWrt?

OpenWrt is a free open-source Linux-based operating system that users can install on many home routers (if the router supports it) or embedded devices. It works as a replacement for manufacturers’ firmware and is a great substitute for those who want more control, customization, and advanced networking features.

OpenWrt has a package manager where users can download additional software such as administration tools, ad blockers, or even a VPN. With thousands of packages available, some tech enthusiasts describe OpenWrt routers as fully programmable mini-PCs that can run 24/7 and have a lot of untapped potential, including safer connection with the latest NordVPN’s package. 

NordVPN’s support for OpenWrt routers

Starting December 2025, OpenWrt users can set up NordVPN headless package on their routers. While it’s not a novelty (NordVPN configuration for routers has existed for a while), it’s the first time the service introduces a headless package with JSON configuration. While “headless” means the service won’t have a graphical user interface (GUI), the package can be easily set up via command-line interface (CLI).

For now, NordVPN offers a headless package that covers the NordLynx protocol only. Users can configure it via a JSON file and manage it over Secure Shell (SSH) using simple CLI commands (connect, disconnect, status, logs). By default, the package will route traffic from your LAN through the VPN for whole‑network coverage. The router’s traffic will also be forwarded.

System requirements

To set up NordVPN headless package you’ll need:

• A router that already runs the latest OpenWrt or OpenWrt 24. 
• Sufficient flash for the package and deps (recommended 12–15 MB of free space). 
• SSH access to the router and internet connectivity for package installation. 
• Enough free storage to install the headless package.

The setup of NordVPN’s OpenWrt package is a simple and straightforward process. See the steps for JSON configuration and package setup below. 

How to set up NordVPN on an OpenWrt router

To set up NordVPN on an OpenWrt router, first install a small package in LuCI, add one JSON config, then control the connection from the command line.

1. Download the package

OpenWrt apps come as .ipk files. Download the NordVPN OpenWrt package that matches your router's CPU from the NordVPN downloads page to your computer.

2. Install in LuCI

1. 1.Open the LuCI web interface in your browser: http://<router-ip>/ (often 192.168.1.1).
2. 2.Click "System" and then "Software." 
3. 3.Click "Update lists."
4. 4.Under "Upload Package", select the downloaded .ipk file and click "Upload & Install." NOTE: If you only see a URL field, paste the direct link to the .ipk and install.

3. Configure (one JSON file)

NordVPN on OpenWrt is configured with a single, human-readable JSON file.

1. 1.

   In LuCI, open “System,” then “File Editor.”

2. 2.

   Path: /etc/nordvpnlite/config.json

3. 3.

   Paste the configuration below into the text field and click "Save":

   { "log_level": "error", "log_file_path": "/var/log/nordvpnlite.log", "adapter_type": "linux-native", "interface": { "name": "nordvpnlite", "config_provider": "uci" }, "authentication_token": "YOUR_AUTH_TOKEN_HERE", "vpn": "recommended" }複製⁠‌

   NOTE: Replace YOUR_AUTH_TOKEN_HERE with the token from your Nord Account.

   If you want to choose a specific country server, insert the country’s name or code (for example, "de"):

   "vpn": { "country": "de" }複製⁠‌

   Save the file after any change.

4. Use the CLI to connect

The CLI is the fastest way to start/stop and check status.

• Initiate SSH into the router

  ssh root@<router-ip>複製⁠‌

• Start with the current config

  nordvpnlite start 複製⁠‌

• Check the status

  nordvpnlite status 複製⁠‌

• Stop the daemon

  nordvpnlite stop 複製⁠‌

• Discover available countries (handy for picking "country" in config)

  nordvpnlite countries複製⁠‌

• Switch the location

  1. 1.

     In LuCI, edit /etc/nordvpnlite/config.json and set "vpn": { "country": "<code-or-name>" }'. (for example “deutschland” or “de”)

  2. 2.

     Apply via CLI:

     nordvpnlite stop nordvpnlite start複製⁠‌

Note: Boot autostart is supported but not enabled by default. You can set up the autostart manually or run nordvpnlite start again.

Additional tips

• If you have connection issues, recheck your authentication token, JSON syntax, and your router's time.
• If the network interface is missing, make sure the service is started and that no other VPN client is using the same interface name.
• For more detailed logs, temporarily set "log_level": "info" in the config file, restart the service, and review the log at /var/log/nordvpnlite.log.
• nordvpnlite is open-sourced. You may visit the official GitHub project page and repository, which contains more information.

Future plans

As of right now, the first version of the NordVPN OpenWrt package (V1) only supports the NordLynx protocol. Future plans include introduction of the UI for simpler management as well as an extended portfolio of NordVPN features while keeping small size of the *.ipk package.