[Nextgrid]

The problem with a server is that it's detectable based on the source IP - if your employee suddenly starts appearing from a datacenter IP you might have to ask questions.

This box allows them to build a virtual network cable back to their usual, residential connection - completely invisible from the other side (besides latency, but this can be explained away).

[huimang]

You can simply run wireguard yourself, no devices needed other than your laptop and a server in your home.

You can run wireguard on a raspberry pi (which are hard to source these days) or something like an HP SFF workstation which will run you ~$50 on ebay. Both of which are useful for other things asides from vpn tunneling.

[Melatonic]

I have messed around with this just using some simple routers. Works fine. You could also just leave the router at a friends house or family