Do all of you use your router as VPN server? Are you running it somewhere else? Do you use SSO for logins?
Is this for home? At my home I use opnsense and it has wireguard you can configure on it.
Wireguard + netmaker
Nothing on the router. Only specific machines/VMs that need external access have Tailscale set up.
Used to be IPSec on the Router. Moved to Wireguard on Home Assistant but currently setting up OPNsense with Wireguard
Openvpn on separate machine
WireGuard in VyOS VM, backup server on Mikrotik router.
Also WireGuard over udp2raw to a VPS abroad for downloading ISOs and VoIP because my provider is a dick and shapes UDP traffic into oblivion.
Serves as a backup connection to my local net if my DDNS script fails.
Openvpn on router (opnsense).
I had a proxmox VM with wireguard for a long time and it worked great. This July I switched the router to firewalla and moved the VPN to the router just to avoid outages when proxmox needed to reboot.
Multiple protocols on my router, uses my AD for authentication.
cloudflared running in LXC container for access via WARP
openvpn inside pfsense using LDAP auth to talk to my freeipa setup. however, it also has a local login just in case freeipa fails.
Your name is legendary. Remember when I first read that book, ha!