hardware for whole-house or LAN-wide VPN

[OpenVPN]

I'm thinking of adding a device to provide a VPN-encrypted LAN on my home network. I'm looking at devices that work with OpenWRT or DD-WRT and support OpenVPN client mode. I use Sonic FTTN via AT&T and would use their router for connectivity, but I want something else on the inside.

Not sure that I want a whole-home VPN, and not sure that I want my Roku/Netflix traffic on this VPN.

Have any of you created a whole-house VPN, and what hardware did you use?

I've found a couple hardware options:


* $40 - GLI Mini Travel Router GL-AR300M with 2dbi external antenna, WiFi Converter, OpenWrt Pre-installed, Repeater Bridge, 300Mbps High Performance, 128MB Nand flash, 128MB RAM, OpenVPN, Tor Compatible - $40 - https://www.amazon.com/dp/B01K6MHRJI/re ... 3yb012BSXJ
- GLI has several interesting options. https://www.gl-inet.com/ar300m/
- These are billed as "travel routers", but 128M RAM and 128M Flash make this look pretty powerful. Better than my Linksys device with 8M/4M that I used teo years agoTP-Link

* $60 - TP-LINK Gigabit VPN Router (TL-R600VPN) https://www.amazon.com/dp/B007B60SCG/re ... 3ybG3AESWJ
- brand name, powerful features. Maybe more than I need.

[forest]

Don't forget to consider CPU speed when judging "powerful". OpenVPN is CPU-hungry, needs ample CPU for more than just crypto, and is not capable of using multiple CPU cores.

Are you sure that TP-Link device supports OpenVPN at all?

[steelgaze]

Depending if @OP will ever see gigabit service, the GLI Mini's processor can handle FTTN speeds. Once the line gets to fiber, I can see somewhere around 500mbps performance. I thin an asus 66u can skirt the gigabit limit with stock firmware and/or FastNAT. DD-wrt and the open source derivative firmwares cant use the hardware accelerated proprietary drivers.