Cyberdeck router: WireGuard VPN with CAKE QoS (Kali, CM4)
Unicorn-1's MIT-licensed configs turn a Kali CM4 uConsole with an Alfa AWUS036ACS into a WireGuard router with CAKE QoS, BBR, firewalld NAT and mDNS.
What it takes
- Software only
- Config change
- Purchase required
Difficulty 1 of 3 — easy.
Details
The repository holds the network-interface, WireGuard, firewalld, DNS/DHCP and CAKE systemd unit files plus a cyberdeck_dashboard.sh monitor, with the full walk-through in ROUTER-complete-setup.md. It was built on Kali 2025.3 (Debian 12 base, arm64) with an Alfa AWUS036ACS as the second Wi-Fi interface and a VPS as the WireGuard endpoint; IP forwarding, NAT masquerade and BBR congestion control are part of the recipe. The Alfa driver may need building from source on the 5.10 uConsole kernel, but the router configuration itself is kernel-independent.
Codiator's reply asks what it offers over OpenWrt on a headless router; the honest answer is that this one travels in your pocket with a screen and a keyboard.
Links
Open at Forum thread- GitHubRepository
Related mods
Rex's Kali image for CM4 and CM5 on the uConsole kernel with the hardware presets; cuu's original CM4 build is documented on the ClockworkPi wiki.
Run a Meshtastic node on the console itself: meshtasticd drives the AIO's SX1262 over SPI, with the graphical MUI, the web UI or the Contact TUI client on top.
On Rex's images a single apt install gives you SDR++ for the AIO's RTL-SDR or a USB dongle; his AIO package adds the sdrpp-brown fork.
Rex's ClockworkPi-RetroPie image (Pi-Gen, EmulationStation, RetroArch) is the working answer; the Debian install and gamepad threads fill in the rest.
jutleys booted a prepared Windows 95 disk image in RetroArch's DOSBox-X core with working mouse buttons; plain DOSBox on the A-06 needs output=opengl to behave.
Two receivers, two recipes: the 4G card's GNSS via AT+CGPS on /dev/ttyUSB3, or the AIO's GPS on the serial port (/dev/ttyS0 CM4, /dev/ttyAMA0 CM5) at 9600 baud.