Or wireguard with your own DNS (unbound) blackhole-ing ad networks: https://www.ckn.io/blog/2017/11/14/wireguard-vpn-typical-set...

Or IPv6. Personally, I like running a Mikrotik Hex Lite as my home router with Ubiquiti wireless APs behind it. I've definitely learned a lot about networking trying to get everything set up nice and secure. That'd make a good blog post, actually...

EDIT: Zerotier is a great service. I kind of dream of some collaboration between Zerotier and Wireguard. Zerotier is Software Defined Networking, I guess(?), and it'd be cool to have wireguard be part of that stack. Though maybe that's not necessary. I haven't dug into Zerotier recently enough to know if thats redundant or at all useful.

Thanks for the tip. I'd never heard of it. For others like me: https://www.zerotier.com/manual/

Here's their getting started page (not terribly mobile friendly though)

https://zerotier.atlassian.net/wiki/spaces/SD/pages/8454145/...