I have a NanoPi R5C (4 GB LPDDR4x RAM, 32 GB eMMC, Quad Core ARM-Cortex-A55 CPU) running OpenWRT (snapshot), and I am thinking of setting a VPN with Wireguard to be able to access my internal LAN whenever I am not at home.
My question is, shall I install the Wireguard "server" directly on the router, or you'd better install it on a proper computer (I have a MiniPc with OpenMediaVault, that's where I'd install it if not in the router)? Pros and cons of each approach?
I have it running on my R4S. Works fine. I guess in the end it all depends on what speed you need and what speed your router can get. If you just want "limited speed" then likely running it on the router is probably easiest, lowest amount of hassle.
Setting up wireguard on the router is a bit easier than doing this on a dedicated server behind your router, but it can be done either way.
As long as the r5c is fast enough to cope with wireguard at your subscribed WAN speed, I would always favour doing this on the router - at least to try it first. If it's not fast enough to meet your satisfaction, you can still move the functionality to a faster device.
My WAN speed is quite low, as I live in a rural area and have Wireless internet with a local provider. In theory max speed is 30 Mbps, in reality average is 5 or 6 Mbps, so I guess router speed won't be an issue lol.
With wan speeds in excess of 500-600 MBit/s we might consider offloading this to a faster/ dedicated server, at your speeds the r5c is total overkill to begin with and won't even wake up while doing wireguard in its sleep.
Not that you need even more Wireguard speed, but 24.10-SNAPSHOT and main snapshot include a commit that increases Wireguard speed (and SQM QoS) on the R5C and other rockchip NanoPi's a lot (as in 40-50% faster on my R5C). When 24.10rc6 is released, it will include this improvement.
Actually, that isn't official OpenWrt. We wouldn't know how old that is. There could be differences we're not aware of (e.g., with network configuration), just FYI.