Inbound Requirements

• Router with sufficient crypto bandwidth
• Provider allowing multiple connections for Wan Bonding

Hardware

TL-WDR7500 / Archer C7

http://wiki.openwrt.org/toh/tp-link/tl-wdr7500

Has MiniPCIe wifi for 802.11a/n/ac. Replace with crypto accelerator

Outbound Requirements

• Minimal disruption of Geolocation
• Low performance impact over mobile 3G/4G
• Affordable
• 3 end points
• Crypto algorithms compatible with router crypto acceleration

NordVPN

• Up to 6 devices
• Only 1 device per-protocol per-server

Benchmarks

http://wiki.openwrt.org/inbox/benchmark.openssl

Notes

https://wiki.openwrt.org/doc/hardware/cryptographic.hardware.accelerators