[bradknowles]

IPSec is lower CPU and higher throughput on the ER-X compared to OpenVPN, but the device is also capable of running wireguard, with the right firmware. And WG will beat IPSec hands-down, at least in the benchmarks I’ve seen.

For me, the bigger concern is that the configurations for WG on the ER-X are still pretty beta, as is connecting to any WG server on the other side that you didn’t build yourself. Service provider support for WG is limited and the configuration management there is still quite clunky.