Raspberry Pi as VPN Gateway for home devices?

[FunThomas 0]

Hello,
is there somewhere a good guide how to setup & secure a raspberry pi 4b or 5 to work as VPN Gateway & handle NAT for home devices which can not use VPN software themselfes.

best regards,
Thomas

[ss11 20]

It's as simple as enabling ip forwarding in sysctl and running iptables to SNAT/DNAT or MASQUERADE to route the entire NAT via the VPN (wg0 or tun0 or whatever).
The problem is, you need another network card (USB maybe) for the raspberry pi, as it only has 1 gbps port.
Running the NAT on the 1 GBPS wired port and connecting to your ISP to run the VPN over wi-fi might be unreliable. I would get a second network card for usb3 and run on wired.