This technical guide covers the complete Speedroute architecture: WireGuard hub-and-spoke overlay, BGP IPv4 announcement, eUICC SIM resilience, Teltonika hardware selection and security.
WireGuard properties
| Property |
Value |
| Transport |
UDP |
| Key exchange |
Curve25519 ECDH |
| Encryption |
ChaCha20 |
| Authentication |
Poly1305 |
| Handshake rekey |
180 seconds |
| Roaming behaviour |
Detects IP change, re-establishes automatically |
eUICC SIM properties
| Property |
Detail |
| UK profiles |
EE, Vodafone, O2, Three |
| Steering |
Un-steered — connects to strongest network |
| Switchover time |
15–30 seconds typical |
| WireGuard re-establishment |
5–10 seconds after switch |
| Static IP preserved? |
Yes — IP on tunnel, not cellular connection |
Teltonika hardware guide
| Model |
Primary use case |
Key feature |
| RUT241 |
CCTV, welfare, OOB |
Compact, single SIM |
| RUT951 |
Dual SIM |
Dual SIM active/passive |
| RUTX50 |
Multi-camera, construction, ANPR |
5G + LTE Cat 20 |
| RUT956 |
BESS, DIN-rail |
RS-485, RS-232 |
Security summary
| Threat |
Mitigation |
| Port scanning |
WireGuard silent — no response to unauthenticated packets |
| Man-in-the-middle |
ChaCha20/Poly1305 encryption throughout |
| Inbound port control |
Hub firewall rules available on request |
| Default credentials |
Change before deployment — installer responsibility |
Ready to solve CGNAT permanently?
Request your free IPv4 Guide and we will follow up with the right solution for your installs.
Request Your IPv4 Guide →