How to setup a VPN to address all the traffic in

Hello,

I would setup a VPN at home in order to address all of the traffic from the home devices through the VPN. Now I have a modem from the internet provider (which not allow any VPN setup on it) connected to a mesh wifi network with Tenda MW3. The idea is to put a router between modem and first mesh. I’ve made a research and it seems to be possible. Setting up OpenWRT on the router, installing OpenVPN and setting up a service like NordVPB or similar.
Now, do you have any idea to suggest me a router, not that expensive, which can allow me to do it?
I have an old TP-LINK WR940N, but for lack of memory is not possible to install OpenWRT plus OpenVPN.

Thanks for helping me!

Well, but using the pi for this purpose not allow me to use the mesh system, right?
To connect the pi between modem and first mesh box it would be necessary that the pi can be connected via Ethernet to both devices…

I use a flashed RE6500 for this. It’s meant to be a repeater but I only it for DNS and Adblock for my network.

I would say to get the cheapest flashable version you can as the RE6500 is probably more expansive than I need for this purpose.

Maybe a Pi would be ok. You don’t need to use the router as the WiFi part, you can push the DNS settings from Openwrt to all your devices and they can still use your ISP router for the connectivity (disable DHCP on your ISP device).

Edit: flushable :smiley:

A pi3 running pihole and pivpn.io is an excellent network tool!

No need to flash any devices

OpenVPN on a cheap router will probably give you 10Mbps or less. Would that work for you?

Use a Raspberry Pi will work as a VPN server well. But it’s only for the traffic between Internet and your local home network (LAN), no matter what your LAN network is (Mesh or IBSS).

A OWRT router with VPN functionality works for you. OWRT supports all sorts of old devices but if you want a better throughput of your VPN a more expensive router is needed.

I don’t think you need the Pi between devices. The pi just needs to be in network and it can push out the required settings if it’s set to have authority over dhcp