DD-WRT Configuration

My home DD-WRT configuration for privacy, security, and performance. Documenting mostly so I can remember my preferred settings whenever I update/reset the router.

All settings are kept as default unless otherwise noted below. Sensitive information is annotated with "{REDACTED}".

Current Router

• Netgear R7800
• DD-WRT Netgear R7800 Wiki

Current DD-WRT Build

• v3.0-r53562 (10/03/23)

3rd-Party Services

• ProtonVPN
• NextDNS

Configuration

Setup

Basic Setup

WAN Setup

WAN Connection Type

• Ignore WAN DNS: ✓¹

Network Setup

Dynamic Host Configuration Protocol (DHCP)

• Forced DNS Redirection: ✓²
• Forced DNS Redirection DoT: ✓²

NTP Client Settings

• Time Zone: {REDACTED}

Tunnels

1. Import Configuration from ProtonVPN
2. Configure
   • DNS Servers via Tunnel: {empty}
   • Kill Switch: ✓¹
   • Allow Clients WAN Access: {unchecked}¹
   • Source Routing (PBR): Route Selected sources via WAN¹
   • Source for PBR: 192.168.1.63¹
   • Watchdog: Enable¹
     • Server IP / Name: 1.1.1.1¹

Wireless

Basic Settings

Physical Interface wlan0 [5 GHz/802.11ac]

• Service Set Identifier (SSID): {REDACTED}
• Network Mode: AC / N Mixed³
• Channel Width: VHT80⁴
• Channel: {least congested, maybe prefer 149-161, don't use Auto}⁴
• Extension Channel: {paired with Channel leads to least congested}⁴
• Advanced Settings: ✓
• Firmware Type: VANILLA⁵
• TX Power: 30⁴
• Protection Mode: RTS/CTS⁴
• RTS Threshold: Enable⁴
• Threshold: 980⁴
• Short Preamble: Enable⁴
• Single User Beamforming: Enable⁴
• Beacon Interval: 300⁴
• DTIM Interval: 1⁴
• Airtime Fairness: Disable⁵
• Sensitivity Range / ACK Timing: 3150³

Virtual Interfaces wlan0.1

• Service Set Identifier (SSID): {REDACTED}
• Advanced Settings: ✓
• Protection Mode: RTS/CTS⁴
• RTS Threshold: Enable⁴
• Threshold: 980⁴
• AP Isolation: Enable⁴
• DTIM Interval: 1⁴

Physical Interface wlan1 [2.4 GHz]

• Service Set Identifier (SSID): {REDACTED}
• Network Mode: N / G Mixed⁴
• Channel: {least congested, don't use Auto}⁴
• TurboQAM (QAM256): Enable⁴
• Advanced Settings: ✓
• Firmware Type: VANILLA⁵
• TX Power: 30⁴
• Protection Mode: RTS/CTS⁴
• RTS Threshold: Enable⁴
• Threshold: 980⁴
• Short Preamble: Enable⁴
• Beacon Interval: 400⁴
• DTIM Interval: 1⁴
• Airtime Fairness: Disable⁵
• Sensitivity Range / ACK Timing: 3150³

Virtual Interfaces wlan1.1

• Service Set Identifier (SSID): {REDACTED}
• Advanced Settings: ✓
• Protection Mode: RTS/CTS⁴
• RTS Threshold: Enable⁴
• Threshold: 980⁴
• AP Isolation: Enable⁴
• DTIM Interval: 1⁴

Wireless Security

Physical Interface wlan0

• WPA Shared Key: {REDACTED}

Virtual Interfaces wlan0.1

• Security Mode: WPA
• Network Authentication: WPA2 Personal
• WPA Shared Key: {REDACTED}

Physical Interface wlan1

• WPA Shared Key: {REDACTED}

Virtual Interfaces wlan1.1

• Security Mode: WPA
• Network Authentication: WPA2 Personal
• WPA Shared Key: {REDACTED}
• Custom Config: vendor_vht=1⁴

Services

Services

DHCP Server Setup

• Static Leases:¹

  MAC Address	Hostname	IP Address	Lease Expiration
  {REDACTED}	tv	192.168.1.63

Dnsmasq Infrastructure

• Query DNS in Strict Order: Enable

• Maximum Cached Entries: 10000

• Additional Options:^{6 1 2}

  no-resolv
     
  # NextDNS
  server=45.90.30.0
  server=45.90.28.0
  add-cpe-id={REDACTED}
  
  # https://github.com/collinbarrett/dd-wrt/issues/1
  neg-ttl=300
  
  # end 
  

Administration

Keep Alive

Schedule Reboot

• Enable: ✓
• At a Set Time: ✓ 02 00 Monday

Footnotes

1. WireGuard client setup guide ↩ ↩² ↩³ ↩⁴ ↩⁵ ↩⁶ ↩⁷ ↩⁸ ↩⁹

2. VPN and DNS guide ↩ ↩² ↩³

3. QCA BEST WIFI SETTINGS ↩ ↩² ↩³

4. QCA Wireless Settings ↩ ↩² ↩³ ↩⁴ ↩⁵ ↩⁶ ↩⁷ ↩⁸ ↩⁹ ↩¹⁰ ↩¹¹ ↩¹² ↩¹³ ↩¹⁴ ↩¹⁵ ↩¹⁶ ↩¹⁷ ↩¹⁸ ↩¹⁹ ↩²⁰ ↩²¹ ↩²² ↩²³ ↩²⁴ ↩²⁵ ↩²⁶ ↩²⁷ ↩²⁸ ↩²⁹ ↩³⁰ ↩³¹ ↩³²

5. DD-WRT Netgear R7800 Install Guide ↩ ↩² ↩³ ↩⁴

6. NextDNS Setup Guide ↩