Configure a dedicated router so that all Internet traffic goes through your VPN service
In this test we are going to configure an independent router at home, in which we will guarantee that only the traffic to the internet goes through VPN.
Looking for gigabit ethernet hardware, with wireless and constant upgrades, we experimented with a MikroTik hAP ac2 device.
There are many more devices with RouterOS and also the possibility to virtualize RouterOS on a computer with several network interfaces. You can also do it with openWRT without any problem, but not on this model.
About the VPN service compatible with Wireguard, say that there are many, in this example we are going to do it with Mullvad, there are many other services that I have not tested like iVPN, lnvpn.net that are also compatible.
Requirements por this test:
MikroTik router / RouterOS installed
Mullvad VPN service or another
#Advantages:
-Wired and wireless network with output to the internet via VPN.
-Being able to have several devices connected with the same VPN account.
-Low cost and consumption.
-Improve the performance and stability of the VPN connection, avoid problems with kill-switch, leaks in the internet traffic, etc. .......
Remember that this example is for having a second router, but there are many more configuration options!
#Getting Started:
The first thing to do is to access the Mullvad VPN service platform and download the configuration files for wireguard.
Example:
Download the configuration file from: https://github.com/modoBitcoin/mikrotik/blob/main/hap_ac2-wireguard.rsc
Open the file with a text editor and configure the variables.
We can save it as 'configuration.rsc' to load it later.
Access the router through WinBox and upgrade to RouterOS 7 if it is not already installed.
Once inside, we reset the router without any default configuration in System - Reset Configuration:
The router will reboot and boot without any factory settings.
Go to Winbox, Files and upload the file with the Upload button.
Access Winbox TERMINAL and type the following command:
/import file=configuration.rsc
Once imported we would already be connected.
*Important to have the ethernet1 port connected to our router.
We can connect via WiFi to our new router, or even to ports 2,3,4 and 5. This is a very basic configuration, from here you can do much more.
Enjoy it!
Thanks a lot.