AC66U and VPN for downloads

[GTvert90]

I have an Asus AC66U and a server running Openmediavault (debian based)

I was looking into a vpn to mask my online usage. (downloads) I use Transmission on the server.

It seems like all the vpn's ive looked into you have to turn it on from a computer. Is it possible to turn it on from the router so that the whole network is encrypted? Which leads me to my next question. I have 100down/20up connection and know most vpn's will slow me down. Is there a way to ONLY have my port that transmission uses connected to the VPN?


I really don't know where to go from here.

Thanks guys
Phil

 

[CaptainSTX]

It is probably possible to do what you want by writing some custom scripts for your router. Search this site for clues and tips.

However what slows your connection down is the CPU processing power devoted to encrypting and decrypting the VPN. So even if you are only using the VPN for downloads on your server everything will be slower when the CPU is involved in the VPN. The impact will be significant perhaps as much as 40%.

 

[GTvert90]

Interesting. I appreciate your input

Sent from my XT1060 using Tapatalk

 

[CaptainSTX]

Your best approach to camouflage your downloads while minimizing the impacts on the rest of your network is download to a PC running VPN client software. The PC will or at least can have more processing power than any SOHO router and the only impact on your network will be limited to how much bandwidth the download themselves are using. QOS might help, but since the packets are encrypted the router really won't know what data is passing. Depending on your setup you might be able to limit the bandwidth dedicated to the PC running your VPN software.

 

[GTvert90]

The only reason I mentioned bandwidth was because if I set up my whole network to go through VPN I would be limited to what there servers are able to do. Most reviews say 7mbps down for a VPN service is good. I don't want to slow my whole network down to 7mbps. I didn't know if I could set the router to just feed one port through the VPN.

Sent from my XT1060 using Tapatalk

 

[Ron]

The only reason I mentioned bandwidth was because if I set up my whole network to go through VPN I would be limited to what there servers are able to do. Most reviews say 7mbps down for a VPN service is good. I don't want to slow my whole network down to 7mbps. I didn't know if I could set the router to just feed one port through the VPN.

Sent from my XT1060 using Tapatalk

punchvpn routers do exactly this. They divide the network into to sub network. ISP and VPN. You can then assign the physical network switch to go via ISP or the VPN route. Any device connected to the network switch with VPN route, will use VPN only. For the wifi network, there are two ssids. Again one ssid is for ISP and the second one is for VPN. Unfortunately punchvpn firmware is based on OpenWRT, and there is no support for AC66U.