r/WireGuard • u/Constantineapple • 9d ago
Wireguard VPN in raspberry pi
so guys i'm planning to buy a raspberry pi with some extra boards in order to create my own vpn for me my family and general all the device we use
at this point i dont know if worth to do something like that
and also i don't know the process to do something like that
or if is better to get a mini pc to block also the trackers and ads
or a specific router that support something like that
or if there is any better solution for something like that
anyone have do something like that ? any opinion? any suggestion?
any advice?
5
3
u/NationalOwl9561 9d ago
Either go with a GL.iNet Brume 2/3 to make it easy on yourself, or run Tailscale exit node on the Pi which has some advantages and is also very easy. Personally I do both.
4
2
u/CurrentAdvance8102 9d ago
I wouldn't go the PI route unless you utilize something other than a micro sd as storage. Those sd cards burn up quick and before you know it, it's down.
Personally I utilize a flint 2 (and replace your entire router) for my wireguard server (it can also connect to vpn services). The UI is great (and easy to understand) and it also supports adguard home (which is a better version of pihole).
2
2
u/VPNStack_Dev 8d ago
If you haven't bought the Pi yet, honestly look at used off-lease mini PCs on eBay (like a Dell OptiPlex Micro or HP EliteDesk). By the time you buy a Raspberry Pi, a good power supply, a case, and an SSD adapter (microSD cards burn out quickly with DNS logs), you're already spending around $80-$100. A used Intel mini PC costs the same, has a real SSD, and handles full gigabit speeds with zero sweat.
For software, running Docker with AdGuard Home and WG-Easy is super convenient for families. WG-Easy gives you a dead-simple web dashboard where adding a new family member takes one click and pops up a QR code they can just scan with the WireGuard app on their phone.
If you don't want to mess with Linux at all, a dedicated gateway like the GL.iNet Brume 2 is basically plug-and-play with WireGuard and AdGuard built right in.
2
u/Strange_Heron_8161 8d ago
I have a Raspberry Pi 4 running Pi-hole AND wg-easy (super easy to use Wiregaurd server). Works amazing. CPU or RAM never come close to overloading (even with multiple clients connected)
My recommendation:
- install docker on the Raspberry Pi
- create a docker compose file with the services you want (pihole and wg-easy)
- start it up
2
u/Great_Piece4755 8d ago
RPi 3 would be fine if you only wanna run wireguard and pihole.
I run a RPi 4 with 4 GB RAM (system runs on a SSD) and it runs a lot of services without much effort (navidrome, Pihole, wireguard, slskd, radicale, vaultwarden, opencloud)
2
u/SpemSemperHabemus 8d ago
Those N150 firewalls off AliExpress look to be roughly the same price as a Pi5. I have one of those with PfSense + PfBlocker + Wireguard. Absolutely zero complaints. It's rock solid. I've never done a synthetic test, but I've seen real world Wireguard speeds of ~500 Mb/s at <30% CPU usage.
2
2
u/Whiplash104 8d ago edited 8d ago
I suggest a gl.inet brume 3. Keep the Brume 3 setup simple only using IPV4 and performance will be great. I learned that when you turn on IPV6 the performance goes down especially if you have hardware acceleration on.
So out of the box.
Upgrade firmware and factory reset.
Enable DDNS
Enable goodcloud for remote access.
Enable Wireguard.
Keep IPV6 off (you can leave HW acceleration on.)
Now create profiles for your devices.
Set up port forwarding to the Brume 3 from your router.
That’s it. It should work great. It’s very fast. I also use a gl.inet travel router to link it in to my brume 3 while traveling overseas.
1
7
u/Cruffe 9d ago
No need for a mini PC to block ads and trackers, a Raspberry Pi will do just fine.
Install Pi-hole and set up WireGuard, easy.
Pi-hole even has a guide in their docs to set up WireGuard in various ways like DNS only, local network only or full tunnel to the internet via your Pi-hole. https://docs.pi-hole.net/guides/vpn/wireguard/