Check out the GL.iNet routers. They come with openwrt out of the box. Yes, it is often an older build, but the UI and services they add on top are excellent, and it has never been an issue for me in practice. Most can be upgraded to stock openwrt still.
Setting up a Wireguard VPN is way easier. They seem to backport anything that matters. They are sometimes marketed as travel routers, but they work fine as your main one. They just don’t take up a lot of space.
If you want better than that? You should use a raspberry pi 4/5, with an extra gigabit USB adapter, as your router, and setup some routers as “dumb APs”. That way you can upgrade your wireless without messing with your core network and services.
Also RP4/5 are both fast enough to software route at gigabit speeds with advanced QoS management. My latencies don’t change if my connection is loaded or not.
Setting up a Wireguard VPN is way easier. They seem to backport anything that matters. They are sometimes marketed as travel routers, but they work fine as your main one. They just don’t take up a lot of space.
https://www.amazon.com/GL-iNet-GL-SFT1200-Secure-Travel-Rout...
If you want better than that? You should use a raspberry pi 4/5, with an extra gigabit USB adapter, as your router, and setup some routers as “dumb APs”. That way you can upgrade your wireless without messing with your core network and services.
Also RP4/5 are both fast enough to software route at gigabit speeds with advanced QoS management. My latencies don’t change if my connection is loaded or not.