Request for advice about VPN

Have a small (~10 devices) home network here in Canada and am considering signing up for NordVPN.

Which scenario would be recommended:

1: Get a new wifi+lan router with VPN capabilties?

2: Use a used PC with two NICs and a network switch for a pfsense install and change my existing wifi router to AP mode?

3: Install OpenVPN on FreeBSD devices or NordVPN app on all machines that access the internet?

Thanks for all your input
 
If your home network is fronted by a single firewalling device (as in cable modem from upstream feeding into a single device that does firewalling and a switch downstream for all the home devices) I would look at setting up the VPN from that device out. That gets everything connected downstream (switch to home devices) behind the VPN.
But that single device needs to be compatible with NordVPN. If stock OpenVPN client can connect to NordVPN that opens up a lot of possibilities (OpnSense, pfSense, home brew FreeBSD/OpenBSD device running pf and OpenVPN)
 
I don't foresee destination switching very often and all devices will use same destination.
Mainly want to hide my IP.

The cable modem is ISP property and going away soon.
Home network is fronted by cheap TPLINK router without VPN abilities.

NordVPN offers .ovpn files for OpenVPN.
 
NordVPN offers .ovpn files for OpenVPN.
Well that is very nice.
My home network is:
Cable modem I own (just need to periodically check compatibility)
Firewall device (currently a pfSense device but OPNSense or roll your own would work)
Switch to everything else

I don't have it, but I could set up an OpenVPN client on the firewall device out to "something" like NordVPN which would make everything behind the firewall go out through the VPN.

It sounds like that's what you intend, so hopefully that gives you some more info on what to explore.
 
A friend of mine has a pretty slick VPN setup. His/her end devices are all on Wifi anyway. So he/she set up multiple wifi networks, each one in a different VPN or plain ISP. So for every end device to switch to a different endpoint you just join a different wifi network. Since they all remember wifi passwords that is very convenient.

For me that wouldn't work because I have too many devices on Ethernet cables. For me every device does its own VPN. But I don't bother with e,.g. the Apple TV and VPNs.

I could also set up both.
 
A friend of mine has a pretty slick VPN setup. His/her end devices are all on Wifi anyway. So he/she set up multiple wifi networks, each one in a different VPN or plain ISP. So for every end device to switch to a different endpoint you just join a different wifi network. Since they all remember wifi passwords that is very convenient.

For me that wouldn't work because I have too many devices on Ethernet cables. For me every device does its own VPN. But I don't bother with e,.g. the Apple TV and VPNs.

I could also set up both.
Oh that is a very cool solution. "connect here to get this, over there to bypass everything". I'll have to remember that.

Thanks
 
Existing router was bought in a hurry on a Saturday night when the the previous one died. It's a cheap black box with no chance of any other firmware.

Which of the 3 options in original post would you recommend?
 
Back
Top