# WireGuard & OpenVPN client with Policy-Based Routing (Dual-Stack IPv4/IPv6)

**URL:** <https://forum.alta.inc/t/wireguard-openvpn-client-with-policy-based-routing-dual-stack-ipv4-ipv6/6812>\
**Category:** Routers\
**Tags:** router, route10\
**Created:** [June 29, 2026, 1:30pm UTC](https://forum.alta.inc/t/wireguard-openvpn-client-with-policy-based-routing-dual-stack-ipv4-ipv6/6812 "2026-06-29T13:30:08Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Unflawed](https://forum.alta.inc/letter_avatar_proxy/v4/letter/u/3e96dc/32.png) [@Unflawed](https://forum.alta.inc/u/Unflawed)\
**Post date:** [June 29, 2026, 1:30pm UTC](https://forum.alta.inc/t/wireguard-openvpn-client-with-policy-based-routing-dual-stack-ipv4-ipv6/6812/1 "2026-06-29T13:30:08Z")

</div>

I’m excited to announce the first stable release of `Route10 VPN Client` (CLI).

This update brings a unified architecture that fully supports both `WireGuard` and `OpenVPN` via CLI with robust routing and leak prevention.

Here are some of its features:

| Feature | Description |
| --- | --- |
| **🌐 Dual-Stack Policy-Based Routing (PBR)** | Easily route specific clients (by IPv4, IPv6, subnet, or MAC address) or specific domains through your VPN. |
| **🔌 Advanced IPv6 Support** | Fully supports standard NAT66 tunnels, as well as delegated routed-prefix mode (assigning globally routable IPv6 addresses directly to your clients, if your VPN provider supports it). |
| **🔄 Automatic DHCP Roaming** | MAC-based routing automatically adapts to IP changes, ensuring your devices stay connected to the VPN as they roam across your network. |
| **🔒 Leak Prevention & Security** | Includes an internet kill-switch and dual-stack DNS leak protection to help ensure your traffic doesn’t bypass the VPN if the tunnel drops. |
| **⚡ Seamless Hot-Reloads** | Update your routed devices or domains on the fly without bouncing your network interfaces. |

Check out the full release notes and installation instructions:  
[https://github.com/unflawed-code/route10-vpn-client](https://github.com/unflawed-code/route10-vpn-client)

This replaces my previous `route10-wireguard-client` project. However, it operates independently, so installing this won’t interfere with or break your older client if you already have it running.

---

<div class="post-metadata">

**Author:** ![jmszuch](https://forum.alta.inc/letter_avatar_proxy/v4/letter/j/b2d939/32.png) [@jmszuch](https://forum.alta.inc/u/jmszuch)\
**Post date:** [June 29, 2026, 2:01pm UTC](https://forum.alta.inc/t/wireguard-openvpn-client-with-policy-based-routing-dual-stack-ipv4-ipv6/6812/2 "2026-06-29T14:01:18Z")

</div>

Neat! I’ll have to check this out when I have a little bit. Very much appreciate your work on things like this and the Suricata Runner. I just think they’re really cool 🙂