kemangVPNBlog · 3 Jun 2020
How to Choose a Router for a VPN: What Really Matters
Not every router can run a VPN. Three things really matter: VPN client support, processor power, and protocol support.
Running a VPN on your router protects every device on the network without installing an app on each one. But not every router can do it, and even among those that can, the results vary widely. This article covers what actually matters, so you do not buy a device that turns out not to be up to the job.
First requirement: the router must work as a VPN client
This is the most common misunderstanding. Many routers say "VPN" on the box, but what they mean is a VPN server: a feature for accessing your home network from outside. That is the opposite of what you need.
What you are looking for is a VPN client: the router's ability to connect to a VPN provider and send the whole network's traffic through that connection. Check the specifications for the term "VPN client", not just "VPN".
The routers supplied by ISPs almost never have this feature.
Second requirement: an adequate processor
This determines your speed, and it is the most often overlooked. VPN encryption is handled by the router's processor. If the processor is weak, your internet speed will be limited by the router, not by your ISP plan.
The symptoms are distinctive: speed is normal without the VPN, but as soon as the VPN is active on the router, speed drops sharply and hits a ceiling no matter which internet plan you have. If the router's CPU shows full usage while the VPN is running, that is your answer.
A practical rule: the faster your internet plan, the more powerful the processor you need. For connections of several hundred Mbps, an entry-level router is almost certainly not up to it.
Third requirement: protocol support
Check which protocols the router supports and match them with what your VPN provider offers. WireGuard is the lightest computationally: on the same hardware, it usually delivers higher speeds than other protocols. If your router supports it, that is a big plus.
OpenVPN has the widest support but is heavier. L2TP/IPSec is available on almost every device, including older ones, but is the slowest of the three. There is a full explanation in our protocol comparison article.
Main router or a separate router?
There are two ways to set it up, each with different consequences.
VPN on the main router
Every device in the house automatically goes through the VPN. This is the tidiest option, but it also means nothing can be excluded without complicated extra configuration. If your main router does not support a VPN client, this option is off the table.
A second router just for the VPN
A small router sits behind your main router, and only devices connected to it go through the VPN. This is more flexible: you can choose which devices are included and which are not, without tinkering with the network you already have.
A small router like this is also handy for travel: one device that secures the connection for your whole group at a guesthouse or hotel, without setting each device up individually.
What not to chase
The number of antennas and the WiFi speed rating on the box have no effect on VPN performance. What matters is the processor and protocol support. A router with very fast WiFi but a weak processor will still become a bottleneck when the VPN is active.
Before you buy
- Make sure the specifications say VPN client, not just VPN
- Find out which protocols are supported, and match them with your provider
- Estimate the processor you need based on your internet plan's speed
- Check whether there is a configuration guide for the VPN provider you use
If you use Mikrotik, a step-by-step guide is in our article on VPN on a Mikrotik router. For an overview of options beyond the router, see how to use a VPN on devices that cannot install apps.
About kemangVPN
kemangVPN is a subscription VPN service built for Indonesia: 84 servers in 45 countries including Jakarta, AES-256 encryption, no activity logging, and 10 devices on one account.
Plans start at US$3.99 a month, paid via PayPal; rupiah payments (QRIS, bank transfer) are available when you order in IDR. Activation is instant once payment is confirmed, with a 7-day money-back guarantee.