@saper I started looking at putting strongswan on my router, but then the openwrt documentation was somewhat discouraging comment about ipsec performance on a small router.

Though I found a new comment saying the router I'm currently using should be fine.