I recently acquired an Edgerouter-Lite (EdgeOS / Linux MIPS), with a RPi (Raspbian / Linux ARM) behind it also running WireGuard/ZeroTier/Tor (WG in case I need more horsepower on the ER-L). WG works on OpenWRT as well, though ZT doesn't work on EdgeOS (there's an obscure Linux MIPS *.deb somewhere but the c++ lib is too out of date on EdgeOS). [1] OPNSense is in the works [2], and also runs ZT. If you're not afraid to build your own I can recommend PC-Engines APU2 + OPNSense [3]. For me it'd cost too much time/effort to build/maintain, YMMV.
Thanks. I have a similar setup, with Edgerouter X and rpi running pi-hole. I hadn't realized what Edge route can run wireguard, thanks. I've been thinking about running VPN on the rpi since pihole barely uses any cpu but have been procrastinating, might have to take a relook.
