Yeah, one of the issues I was having with running VPN on router is that you need a somewhat beefy router if you want to use your full bandwidth---my router maxes out at about 90Mbps with WireGuard, even though it can NAT around 1Gbps (which is our service).

I implemented two workarounds, one was to use my access point as a VPN router since it had a beefier CPU, and the other was to just use an ARM SBC with Linux to handle that task. (I ended up with the latter, as the former ended up maxing out at around 400Mbps, and introduced some additional headaches.)