> Optional packages, installable on-the-fly

Possible on Asus hardware using the third-party Merlin firmware as well:

* https://github.com/RMerl/asuswrt-merlin.ng/wiki/Entware

* https://www.asuswrt-merlin.net/features

The default Asus firmware is decent too.

Wireguard, particularly.

Except if you don't have a premium router with high-end CPU you will have minimal bandwith.

Most residential connections in my area have such abysmal bandwidth it really doesn't matter at home.

1Gbps down but 30 Mbps up seems reasonable.

My Mikrotik hEX can max out that 30 Mbps without any trouble.

I can do over 270Mbps down and 80Mbps up (May be limited by my upload, download is a CPU limitation) on a RBM33G as a client-router.

I'm not 100%, but it may actually be 370Mbps down, but I don't want to advertise that number without being sure. I replaced it with a RPi4 as a router-on-a-stick WG gateway. The RPi4 has no problem keeping up with my 500/100 fiber connection.

The RBM33G has a pretty weak MTK7621a dual core 800mhz MIPS cpu.

I should setup two of them and run some proper benchmarks at some point.

You'd be surprised; I'm pulling 150Mbps on a years-old $40 Edgerouter X (it was on sale when I bought it; it's normally $60) over Wireguard to Mullvad.

Depends what you want to do with it. If you just want a secure SSH tunnel it's perfectly serviceable

I get plenty for my needs on an Archer C7.

What speeds are you getting?