Question Mikrotik router or Raspberry Pi?

[tanlleoni]

Hello,

I want to configure VPN on my network. So my brother can connect to my network and surf the internet like he is at my place.

What is the better option: to have a Raspberry and install WireGuard on it, or to buy a MikroTik(which one?) that supports WireGuard?

Raspberry Pi 4 2GB + power + sd + case = around 100e
MikrotTk is around 50e(MIKROTIK RB750GR3 hEX) Is it okay for me?

Is there any cheaper option?

 

[Tech Junky]

I run a full PC as a router and other functions but, a Pi should work fine or if you have a spare PC use that. Mikrotik though would work fine. I don't know the specific models but your google fu should lead you in the right direction.

If your speed through the ISP is under 600mbps then OVPN might be on your router to allow use as a proxy as well.

There are other options like proxies that would spoof his geo location as well.

 

[tanlleoni]

I can use nginx proxy, but then my computer needs to be on all the time. Am I right?

 

[Tech Junky]

on all the time. Am I right?

That's how networks work. Router is off then proxy doesn't work. Right?

Since he wants to use your geo location have him pay for whatever device you go with. if you have a router that supports OVPN profiles just add one to it and give him creds to login and pass traffic. Or have him sign up for a VPN / Proxy service. I use Nord for under $2/mo. I tested quite a few and Nord was the only one that provided full line speed over 1GE using WG.

Another thing to keep in mind is if he attracts DMCA notices they will come to you instead of him. And if you have a data cap you'll hit it sooner with his traffic being added.

 

[tanlleoni]

Since he wants to use your geo location have him pay for whatever device you go with.

I think you're right here. I don't want to use proxy, because I need to install it on my notebook and what will we do when I take my laptop outside?! It is not a good and permanent solution. I don't have another computer that is always on.

So MikroTik with installed WireGuard on it or Raspberry with WireGuard. I will think. Thanks

 

[Tech Junky]

No problem. Low power boxes seems to be your best option for this sort of setup.

 

[Fallen Kell]

It all depends on how fast of a network you have an how much performance you expect to be able to have out of this. A Pi 4 is great for a lot of things, but is underpowered for doing complex network routing. It has a total bus bandwidth to do 4gbps of data (shared between all USB devices and any PCI-e add-on cards). So don't plan on it being able to keep up with any kind of gigabit routing if you are also using any kind of internal storage to host things. It's CPU is also not fast enough to do complex routing and firewall (i.e. deep packet inspection).

You are better off getting a small form factor PC and running pFsense, or OPNsense and run wireguard there. As much as I would like to suggest the MikroTik, for something that is running critical security software, you want something that you have a lot more control of getting active updates. I like pFsense because I have come to love pfblocker for keeping my entire network safe and preventing something that slips in from being able to get out to command/control systems and/or opening up reverse shells into my network.

I snagged a cheap Dell Optiplex 9020 SFF used/refurbished off ebay, and added a 40Gbps network card (a mellanox connectx-3 VPI Pro for $29, but you need networking gear that supports a 40Gb QSFP+ port, which I have), but you can just as easily use a dual or quad port 10Gbe card instead (just pick one supported by pFsense or OPNsense).