Open Wrt/ Sing-box Expert Needed for Dual-VPS Router Setup

OpenWrt / sing-box Expert Needed for Dual-VPS Router Setup I am looking for an experienced OpenWrt network engineer to configure and test a reliable router-based connection for use on restrictive networks. The solution should include: - Primary VPS: Canada with a dedicated static IPv4 address - Secondary VPS: Pakistan with a dedicated static IPv4 address - Obfuscated connections using VLESS + REALITY through sing-box or Xray, or another well-justified protocol - Manual or automatic failover between the two VPS connections Scope of Work - Recommend a suitable router, preferably a GL.iNet Flint 2 or another reliable OpenWrt-compatible model - Configure the Canadian VPS as the primary server - Configure the Pakistan VPS as the independent backup server - Use separate domains or subdomains for each server - Configure sing-box or Xray with VLESS + REALITY, or recommend a stronger alternative - Ideally use different transports or profiles for the two servers to improve redundancy - Route all Wi-Fi and Ethernet traffic through the active tunnel - Implement a strict firewall-level kill switch - Prevent any fallback to the regular ISP connection - Force DNS traffic through the tunnel - Disable IPv6 or tunnel it securely - Support TCP and UDP traffic - Configure automatic startup and reconnection after tunnel, internet, router or power interruption - Configure reliable manual or automatic failover between the Canadian and Pakistan servers - Secure the router and both VPS servers - Test IP, DNS, IPv6 and WebRTC leak protection - Test tunnel failure, router restart, server failover and automatic reconnection - Provide complete configuration backups and recovery instructions The router must be fully configured and tested before travel so it can be connected to an ISP and used without technical changes. Required Deliverables 1. Fully configured OpenWrt router 2. Fully configured Canadian primary VPS 3. Fully configured Pakistan backup VPS 4. Separate connection profiles for each server 5. Firewall-level kill switch and leak protection 6. Manual or automatic failover between the servers 7. Successful failure, reconnection and failover testing 8. Router and server configuration backups 9. Written setup, recovery and troubleshooting instructions 10. Short handover session and limited post-installation support All router, VPS and domain accounts must remain under my ownership. The contractor must not retain permanent administrative access after project completion. Required Experience Applicants should have direct experience with: - OpenWrt and GL.iNet routers - sing-box or Xray-core - VLESS and REALITY or XTLS Vision - Linux VPS administration - nftables, fw4 or iptables - TUN or TProxy routing - Multi-server routing and failover - DNS and IPv6 leak prevention - Firewall kill switches - Restrictive or heavily filtered networks Please do not apply if your experience is limited to installing ordinary OpenVPN or WireGuard profiles. Questions for Applicants 1. Have you configured VLESS + REALITY on an OpenWrt router? 2. Have you worked with the GL.iNet Flint 2 or GL-MT6000? 3. Would you use GL.iNet firmware or vanilla OpenWrt, and why? 4. How would you prevent traffic from escaping if sing-box or Xray crashes? 5. How would you configure failover between the Canadian and Pakistan VPS servers? 6. Would you use different protocols or transports for the two servers? 7. How would you prevent DNS and IPv6 leaks? 8. How would you support UDP traffic for video and voice calls? 9. Can you provide complete configuration backups and recovery instructions? 10. Can you demonstrate the kill switch and server failover during testing? Please include examples of directly relevant work. Preference will be given to applicants with experience supporting connections in highly restrictive network environments.