mihomo

A separate subnet on OpenWrt, bound to its own SSID, with source-based policy routing that sends the entire subnet to a mihomo TUN gateway sitting on a different subnet. Clients configure nothing: join the SSID and traffic is proxied, switch back to the main WiFi and it is direct again. There is one well-hidden trap at the end — ImmortalWRT’s DNS redirect. The gateway itself is built in the previous post: Running mihomo as a LAN gateway with Docker macvlan. ...

I run mihomo in Docker on an N95 mini PC. macvlan gives the container its own LAN address (10.0.0.6), so any device that points its default gateway there gets rule-based proxying — without touching the router’s own routing table. Two things bite you once the container is up: the host and its own macvlan containers cannot reach each other, and you still have to decide how clients switch over to the new gateway. This post covers both. ...