I want to build a travel router that I can use to create a secure access point on unsecure networks (e.g. hotels) and route my traffic through NordVPN. Currently, my plan is to load pfsense on a low to mid spec Protectli Vault. I also want to include an IDS, adblocker, and network monitoring tools (with TCP dumps to Wireshark).

My question is: How would this setup be limited due to my traffic always being under a Double NAT? I assume that UPnP is off the table (which doesn’t matter to me), but will this also affect my VPN connection? Is there a way to avoid the double NAT when using the router at home?

Additionally, any suggestions for router firmware, hardware, or plugins/software would be appreciated. 👍

  • bizarre_seminar@alien.topBEnglish
    2·
    1 year ago

    I have nothing to add to the comments about double NAT, but I wanted to chime in to ask if you’d considered something like a GL.inet travel router? It’s OpenWrt instead of pfSense but I think it can do anything you want, and it’s cheaper than a Vault.

  • cubic_sq@alien.topBEnglish
    1·
    1 year ago

    Have built mine with wan being either a usb wifi dongle or usb rj45. Depending what is available

    • this way i have full routing / etc and can use either wifi or cable for my client devices.
    • built just with debian without gui