Whole Internet Home Traffic via VPN - Routers/Computer?! Master/Slave

Jul 15, 2018
2
0
10
Hello everybody,

im struggling atm with a Networking Problem.
Im using two different VPNs, via OpenVPN and its working flawless.

Both have a few options that other Providers wont provide, so I build
a cheap (but damn slow) "Network."

ATM it looks like this:
-> Router -> Slave PC (2x LAN with VPN) -> Main PC with Second VPN
It works but a lot traffic is lost, due to the Slave PC, which dont has a gigabit Card.
I could upgrade to a Gigabit card, but that wont fix my Problem, that I will explain now.

In the past time, I buyed a few Netgear Routers which I bricked after a few flashes with openwrt or ddwrt. I wanted to use a cfw, so that I could install the VPN via Openvpn directly on the Router.
So I could connect that "VPN Router" to my Main Router, and route all the traffic over that.
But those low budget Routers dont have enough "power" for my project. So I scraped it completly.

My newest Idea would be, since I want to traffic my whole home network via a VPN (or two),
installing a Router Software/VPN Software on a Raspberry PI (with a second Lan adapter), or
installing Ubuntu/Windows 7 on a old Tower-Computer, and add to that PC a 4 Port Lan Gigabit Card. So I connect my peripherals (PS4, Xbox1, Laptop etc.) via Lan to that PC.

What other recommendations, would you have for me?

I Use that VPN for Online Gaming, and streaming, moved from Germany to USA and cant use, some services.


I dont know, maybe adding a switch to that Server PC or something.


I would like to hear some Ideas or recommendations.

Greetings
 
Solution
x86 cpu compared to what's in router is 1000 times difference. you can run qdisc qos at like 20Gbs if you wanted where a consumer router can do about 100Mbs.

if you are buying stuff take into consideration the cost of running it too. 100W is around $120 annually. the lowest powered x86 can run routers very well. most of the SOCs right now are really old, which sucks. pfsense recently required pcs to have AES-NI on their CPU. This factors out a lot of low end ones. check the intel page while looking.

https://www.netgate.com/blog/pfsense-2-5-and-aes-ni.html
I would bet a raspberry pi is not going to be all that much faster than a router. Both have very tiny cpu.

It all depends on how much traffic you really need to run via the vpn. If you can keep it under 20mpbs many routers can run that fast with vpn.

The easiest router I have found to run vpn on are Asus device with the merlin firmware. You can run mulitple vpn clients to different providers if you really want to.

I would configure the router to allow traffic that is not critical to be on vpn to bypass and directly access the internet. This will greatly reduce your load on the router cpu.

You can get small dual nic motherboards that can run standard intel and amd possessors. For a couple hundred dollars you can build a box with something like pfsense on it that can run faster than many router. Still openvpn takes a lot of cpu power if you could use IPSEC it would allow more total traffic.

 
Jul 15, 2018
2
0
10


Thanks for your reply.

IPSEC isnt a viable setting for me.

pfsense is on my todo-try list. I think I'll go with a "old" dual/quad core Computer and a standard quad-Lan card.
Since openvpn needs a bit more power for transcription (sorry if that word is wrong used haha)

So I could run it as a Server, maybe add a tunneling via 2 VPNs directly on that Computer.

Can pfsense handle those things?

Greetings

 
x86 cpu compared to what's in router is 1000 times difference. you can run qdisc qos at like 20Gbs if you wanted where a consumer router can do about 100Mbs.

if you are buying stuff take into consideration the cost of running it too. 100W is around $120 annually. the lowest powered x86 can run routers very well. most of the SOCs right now are really old, which sucks. pfsense recently required pcs to have AES-NI on their CPU. This factors out a lot of low end ones. check the intel page while looking.

https://www.netgate.com/blog/pfsense-2-5-and-aes-ni.html
 
Solution