diff --git a/installer/resources/router.testnet.config b/installer/resources/router.testnet.config
new file mode 100644
index 0000000000..61b8834ac6
--- /dev/null
+++ b/installer/resources/router.testnet.config
@@ -0,0 +1,48 @@
+# suggestions for a testnet configuration, annotated
+# also:
+# the transports really benefit from a few ms of latency
+# between the routers. On LXC, set:
+# tc qdisc add dev eth0 root netem delay 10ms
+# or, for example, to drop 2% of packets:
+# tc qdisc add dev eth0 root netem delay 10ms 2
+
+# this disables the private IP range checks and a whole
+# bunch of other stuff to make testnet work better
+# recommended even if you're using public IPs
+i2np.allowLocal=true
+# adjust as necessary
+i2np.bandwidth.inboundBurstKBytes=1953105
+i2np.bandwidth.inboundBurstKBytesPerSecond=97655
+i2np.bandwidth.inboundKBytesPerSecond=97605
+i2np.bandwidth.outboundBurstKBytes=1953105
+i2np.bandwidth.outboundBurstKBytesPerSecond=97655
+i2np.bandwidth.outboundKBytesPerSecond=97605
+# you can set some routers to true to test firewalled
+i2np.ipv4.firewalled=false
+i2np.ipv6.firewalled=false
+i2np.lastIPv6Firewalled=false
+i2np.upnp.enable=false
+# allow everything readable by everybody
+i2p.insecureFiles=true
+# just point it to nowhere
+i2p.reseedURL=https://localhost:3333/foo
+# disable IP blocking
+router.blocklist.enable=false
+# set some to true and some to false so you have floodfills right away
+router.floodfillParticipant=false
+# prevent leakage to real network
+router.networkID=99
+router.newsRefreshFrequency=0
+# prevent RI rekey after a long downtime
+router.rebuildKeys=false
+# accept tunnels right away
+router.rejectStartupTime=20000
+router.reseedDisable=true
+router.sharePercentage=80
+router.sybilFrequency=0
+routerconsole.advanced=true
+routerconsole.welcomeWizardComplete=true
+stat.full=true
+# NTP
+time.disabled=true
+time.sntpServerList=localhost