asuswrt-merlin.ng VS YazFi

Any way to tell if these issues affect the community-developed, third-party "Merlin" firmwares?

1: https://www.asuswrt-merlin.net

I think you need VPN director from Asuswrt Merlin https://github.com/RMerl/asuswrt-merlin.ng/wiki/VPN-Director

Not an answer, but I have the AC5300 and like it. And if you're not aware, there's open source firmware for a lot of the Asus routers here. I use it and once again seems fine. Disclaimer, I'm not a power user, so probably can't answer anything more specific about VPN setup on the router itself, but from my understanding it is possible.

However, I am struggling with how to route the site-to-site client's WAN traffic through its own OVPN client connection. If I set up a rule routing all client subnet traffic through the OVPN connection, then the Wireguard rule never gets processed, because all OVPN rules are processed before any Wireguard rules.

Many (all?) of the ASUS routers supported by the Merlin firmware https://www.asuswrt-merlin.net/ have OpenVPN built-in. If you have an ISP-provide modem/router, you may be able to put it in transparent bridge mode.

However, it looks like only the older model is on sale. Go for the Asus and do research if you want Merlin or not.

Here's the official website. It has a list of supported routers: https://www.asuswrt-merlin.net/

If you are somewhat good with computers, get an Asus router with a broadcom chipset that can run Merlin WRT. They are rock solid and feature packed (you can even adjust the wireless power level, since you're having wifi issues). There's a list of supported routers here: https://github.com/RMerl/asuswrt-merlin.ng/wiki/Supported-Devices

That would allow you to have a guest wifi using YazFi that routes everything through a VPN of your choice and it would leave your regular wifi untouched. You can even use the DNS director to intercept all traffic on port 53 and reroute it to your pihole, including queries going out to 1.1.1.1 or other public DNS servers from apps trying to circumvent DNS blocks.

If your siblings are on wifi, you could also consider enabling guest network and putting them on that. For further control of the guest network you could try the YazFi add on: https://github.com/jackyaz/YazFi

Maybe something like this? I'm also pretty sure that you can setup something similar on OpenWRT, but you'll probably have to do it manually (where one wifi is piped through VPN and others are not, etc..). You'll probably have to flash your router however. Home 'routers' are trash, home routers on stock firmware are something akin to a burning dump.

Yeah, you can do this using an Asus router running Merlin firmware. VPN Director would allow you to set up rules for specific clients. If you wanted to take this even further you could install YazFi on the router.

Yazfi: https://github.com/jackyaz/YazFi