OPEN-SOURCE OPENWRT CLIENT

Remote access for OpenWrt,
with the trust model explained.

51DDNS is a commercial, vendor-hosted remote-access service. Its Apache-2.0 licensed OpenWrt agent connects your router to the 51DDNS control plane and starts the feed-provided FRP client with the tunnel configuration assigned to your account.

View source code Installation guide

Apache-2.0Client license

UnprivilegedDedicated ddns51 user

Sandboxedprocd / ujail runtime

Source builtNo precompiled agent binary

INSTALLATION

Install from the OpenWrt feeds.

Packages

The agent and LuCI interface are submitted independently to the official OpenWrt feeds:

51ddns-agent — agent, init script and configuration
luci-app-51ddns — web interface under Services → 51DDNS Remote Access

opkg update
opkg install 51ddns-agent luci-app-51ddns

On snapshot releases using apk, replace opkg with apk.

Build from source

Until feed review is complete, use the OpenWrt SDK and the package definitions from the public repositories. The agent is compiled from Go source by the OpenWrt build system.

make package/51ddns-agent/compile V=s
make package/luci-app-51ddns/compile V=s

Source and build notes →

CONFIGURATION

Connect the router in LuCI.

1
Copy your account token
Sign in to the 51DDNS console and copy the masked account token from the top bar. Treat it as a credential and do not publish it.
2
Open the LuCI page
Go to Services → 51DDNS Remote Access, enable the service, paste the token and choose Save & Apply.
3
Verify the connection
The page shows the service state, agent version, current plan and expiry. A newly registered router also appears in the 51DDNS console.
```
/etc/init.d/51ddns-agent status
logread -e 51ddns-agent
```

DATA & SECURITY

What leaves the router.

Sent to 51DDNS

Account/device credential, installation and device identifiers, platform and agent version, public IP, operational status and tunnel configuration metadata.

Not uploaded

The agent does not scan or upload arbitrary router files. Traffic visibility depends on the protocol selected by the user; prefer HTTPS and SSH.

Local storage

Credentials are stored below /etc/51ddns with restricted permissions. Runtime FRP configuration is temporary and recreated after reboot.

The operator of api.51ddns.com supplies the FRP configuration and therefore controls the relay endpoints used by the agent. Install only if you trust the service operator. Read the complete privacy notice.

OPERATIONS

Troubleshoot or remove it.

Common checks

uci show 51ddns
/etc/init.d/51ddns-agent restart
logread -e 51ddns-agent
nslookup api.51ddns.com

HTTP 401 means the account token is invalid or revoked. Confirm system time, DNS and outbound HTTPS access before reporting a connection problem.

Disable and uninstall

/etc/init.d/51ddns-agent stop
/etc/init.d/51ddns-agent disable
opkg remove luci-app-51ddns 51ddns-agent

After removal, delete the router from the 51DDNS console if you no longer want it associated with your account.

SUPPORT

Need help?

Include the OpenWrt release, architecture, agent version and relevant log lines. Never send your account token.

info@51ddns.com →