I’m doing a crude version of this with a Flint 2 router and Mullvad. Don’t enjoy fiddling with my network (and upstream is unreliable for now, making troubleshooting an irritating game of crossing off doubts each time I have issues, rather than learning things better).
At the moment I just have a guest Wifi that doesn’t get VPN’ed for things like Roku devices and such (slowly migrating the home away from stuff like this).
I appreciate the always-on “blanket” traffic tunneling, a lot. But I’d like a more flexible setup - things like allowing access to Jellyfin from guest Wifi (or similar), site-specific exclusions or other workarounds for when I need to reach a banking site that has predictable VPN complaints, etc.
Not a fan of just playing house-wide VPN exit whack-a-mole each time myself or someone else experiences an issue, but maybe that’s part of the game.
Know of any good starting points for the flexibility I’m describing? Probably just need to learn LuCI and firewall and VLAN principles?
Haha don’t sweat it, I certainly won’t be poking holes in your config. Thanks for the rundown!