ansible-openwrt VS asuswrt-merlin.ng

There have been efforts in that direction:

- https://github.com/gekmihesg/ansible-openwrt

- https://github.com/NN708/ansible-openwrt

and even

- https://docs.ansible.com/ansible/latest/collections/communit...

Are they not sufficient?

I think you need VPN director from Asuswrt Merlin https://github.com/RMerl/asuswrt-merlin.ng/wiki/VPN-Director

Not an answer, but I have the AC5300 and like it. And if you're not aware, there's open source firmware for a lot of the Asus routers here. I use it and once again seems fine. Disclaimer, I'm not a power user, so probably can't answer anything more specific about VPN setup on the router itself, but from my understanding it is possible.

However, I am struggling with how to route the site-to-site client's WAN traffic through its own OVPN client connection. If I set up a rule routing all client subnet traffic through the OVPN connection, then the Wireguard rule never gets processed, because all OVPN rules are processed before any Wireguard rules.

Many (all?) of the ASUS routers supported by the Merlin firmware https://www.asuswrt-merlin.net/ have OpenVPN built-in. If you have an ISP-provide modem/router, you may be able to put it in transparent bridge mode.

However, it looks like only the older model is on sale. Go for the Asus and do research if you want Merlin or not.

Here's the official website. It has a list of supported routers: https://www.asuswrt-merlin.net/

If you are somewhat good with computers, get an Asus router with a broadcom chipset that can run Merlin WRT. They are rock solid and feature packed (you can even adjust the wireless power level, since you're having wifi issues). There's a list of supported routers here: https://github.com/RMerl/asuswrt-merlin.ng/wiki/Supported-Devices

Asus may be terrible in other parts of the company, but they're good in the wifi router department because they cooperate with their users to produce a better product: https://www.asuswrt-merlin.net/