The only solution for OpenVPN on the router is just more raw horsepower. That's why you can take the exact same hardware, install firmware w/ Wireguard support (which does run in the kernel), and get triple the performance, AES-NI or no AES-NI. Assisted encryption might improve matters 5-15% (hard to be exact), but the real culprit is the fact that OpenVPN has to run in user-space and NOT the kernel! As such, it's subject to constant ring changes to manage the tunnel. Yes, having AES-NI assist helps, but its effects are relatively marginal (ppl routinely overstate its impact). Having the wg tunnel in the router is giving me less speed and leaking DNS (a bunch of OpenDNS addresses).Honestly, much of his response is correct, *except* the reason performance is so poor w/ these consumer routers is NOT due primarily to encryption. The credit goes to teymur88 from gl-inet forum for publishing this method.Īlso sorry for my grammar issues English is not my native language.īut I'm getting different results from running the NordVPN app on my desktop machine. Hit save and then save&apply then assign a firewall zone for it and add a dns! that's it. Now hop on to the peers tab and enter your public keyĮndpoint host: the ip of the vpn host you got at the last step Once you created your interface, on general tab enter your private key and for the ip address enter the one you got using ifconfig command. Once you installed above packages go to Luci -> network -> interfacesĪdd new interface using wireguard vpn protocol Kmod-wireguard luci-app-wireguard luci-proto-wireguard wireguard wireguard-tools Now you can install following packages in your router to connect to wireguard using information you got from above Keep that in mind the above command gives you the fastest server at the time if you're looking for the information of a specific server, connect to that country and copy the url above in your browser and from there search manually by the server number (e.g. Output should be like above picture which includesĥPXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXF30= #public key which is different for each server

Nordvpn supported routers