Wireguard on OpenWRT router or on server

Hi all,

I have a NanoPi R5C (4 GB LPDDR4x RAM, 32 GB eMMC, Quad Core ARM-Cortex-A55 CPU) running OpenWRT (snapshot), and I am thinking of setting a VPN with Wireguard to be able to access my internal LAN whenever I am not at home.

My question is, shall I install the Wireguard "server" directly on the router, or you'd better install it on a proper computer (I have a MiniPc with OpenMediaVault, that's where I'd install it if not in the router)? Pros and cons of each approach?

Thanks!

Cheers

I have it running on my R4S. Works fine. I guess in the end it all depends on what speed you need and what speed your router can get. If you just want "limited speed" then likely running it on the router is probably easiest, lowest amount of hassle.

1 Like

check that out as well

1 Like

Setting up wireguard on the router is a bit easier than doing this on a dedicated server behind your router, but it can be done either way.

As long as the r5c is fast enough to cope with wireguard at your subscribed WAN speed, I would always favour doing this on the router - at least to try it first. If it's not fast enough to meet your satisfaction, you can still move the functionality to a faster device.

3 Likes

My WAN speed is quite low, as I live in a rural area and have Wireless internet with a local provider. In theory max speed is 30 Mbps, in reality average is 5 or 6 Mbps, so I guess router speed won't be an issue lol.

With wan speeds in excess of 500-600 MBit/s we might consider offloading this to a faster/ dedicated server, at your speeds the r5c is total overkill to begin with and won't even wake up while doing wireguard in its sleep.

2 Likes

Yeah... I can only dream of that!

Thanks, I will try to set it up on the NanoPi and see how it goes.

Cheers

Not that you need even more Wireguard speed, but 24.10-SNAPSHOT and main snapshot include a commit that increases Wireguard speed (and SQM QoS) on the R5C and other rockchip NanoPi's a lot (as in 40-50% faster on my R5C). When 24.10rc6 is released, it will include this improvement.

I'm on "ImmortalWrt SNAPSHOT r32925-d3f097a70e / LuCI Master 25.004.31414~8b5a7c1" right now, not sure if that is behind?

Actually, that isn't official OpenWrt. We wouldn't know how old that is. There could be differences we're not aware of (e.g., with network configuration), just FYI.

Yeah f*ck, I just noticed, not sure why I downloaded that one?! Lol

When 24.10rc6 is released, it will include this improvement.

I guess I will wait for this one to drop, and then update.