1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.
Dismiss Notice

Welcome To SNBForums

SNBForums is a community for anyone who wants to learn about or discuss the latest in wireless routers, network storage and the ins and outs of building and maintaining a small network.

If you'd like to post a question, simply register and have at it!

While you're at it, please check out SmallNetBuilder for product reviews and our famous Router Charts, Ranker and plenty more!

Selectively route clients to a separate Wireguard proxy server

Discussion in 'Asuswrt-Merlin' started by Chris_J, Feb 28, 2020.

  1. Chris_J

    Chris_J Regular Contributor

    Joined:
    Dec 10, 2019
    Messages:
    103
    Location:
    UK
    I'm wondering whether this is possible to do on the AC86U router. I'm thinking about setting up a RPi that will run a proxy server with a Wireguard VPN connection and maybe Pihole+Unbound, but I only want certain clients to route via the proxy server.

    Are there settings available to do this?
     
  2. heysoundude

    heysoundude Very Senior Member

    Joined:
    Sep 20, 2016
    Messages:
    746
    if your router is running Merlin's firmware, I would suggest you go have a poke around at diversion.ch, and look for amtm while you're there.
    you should find everything you need to accomplish what you're looking to, all made to order to work with Merlin on your router...except WireGuard.
    For that, there's plenty of guidance to be had here: https://www.snbforums.com/threads/experimental-wireguard-for-rt-ac86u-ax88u.46164/
    if you're up to spinning up PiHole and Unbound on a RasPi, all of the above should be an easy hour or 2 of reading and setup.
     
  3. Chris_J

    Chris_J Regular Contributor

    Joined:
    Dec 10, 2019
    Messages:
    103
    Location:
    UK
    Sorry, I should have mentioned, I am already enjoying the latest Merlin firmware along with Unbound + Adblocking. I've been toying with the idea of moving this to a RPi that would be running other projects too.

    I think my only option would be to manually configure each client that I would like to use the Wireguard connection.
     
  4. heysoundude

    heysoundude Very Senior Member

    Joined:
    Sep 20, 2016
    Messages:
    746
    Full disclosure is always helpful.
    You’re considering moving functionality off the router why? This stuff is pretty light and fairly highly optimized- it wouldn’t speed up your network in any noticeable or significant way. For that you’d need a monster pipe.


    Sent from my iPhone using Tapatalk
     
  5. Chris_J

    Chris_J Regular Contributor

    Joined:
    Dec 10, 2019
    Messages:
    103
    Location:
    UK
    I created this thread in order to learn about selective routing to a Wireguard proxy server, so full disclosure of what other add-ons I was running was not really necessary, hence the exclusion from the post. My intension to move Unbound to the Pi is not to increase network speed, but since I am looking to test out PiHole, I felt that Unbound would have a better home on the Pi hardware. Again, I'm not sure how this is relavent, so I only mentioned it in passing.