Tell me a budget router with channel shaping

Question

Computer networks

The network is as follows:
external Internet beeline (pptp or l2tp) >>> wifi-router >>> locale: (server, laptops)

The Dlink DIR-400 generation of hell is used as a router. It raises the VPN, distributes the Internet to the local area, forwards the port to the Minecraft server (connected with a patch cord, and not through Wi-Fi, of course).

The problem is that intralocal machines compete for traffic with the server, which is why the players have lags. Obviously, it is necessary to shape the traffic.

What has already been done:
I tried to sew a router in DD-WRT. Happened. I set it up for a long time, tried all the manuals found - it's useless, it does not raise the VPN. It turned out that in my case it does not know how to pptp / l2tp due to a special implementation by the beeline. After a little googling, I found out that all Tomato and other OpenWRT also have a similar problem. The miracle is that in my miserable DIR-400 support for pptp and l2tp "from the beeline" is implemented.

What options do I see:

1. WiFi router with traffic shaping support. I do not know any model, I do not focus on prices. The question is how not to "fly in" with the selected router and beeline. I ask for tips, at least on models, I will google the question of “flying in” myself.

2.Router based on a quiet cold PC solution and Archlinux. Some cheap Intel Atom with passive cooling. An attempt to choose options came up against a huge selection of options, most of which, upon closer inspection, are not satisfied with one of the parameters: either active cooling, or the price bites, or the periphery I don’t need to hell (and the price, respectively), and it’s completely incomprehensible how to start it all , what kind of power supply is needed (to be silent), what case to buy and why are all cases so fucking expensive?

3.Deliver the necessary software to the server (it is also on Archlinux), configure it as a router, and enable Dlink DIR-400 in bridge mode. Of the obvious disadvantages, the server begins to look directly into the outside, and due to my low qualifications in terms of protecting linux systems and a large number of software that is unnecessary for the router, it is very vulnerable.

4. Install VirualBox on the server (Celeron G530 processor, VT-x support is available, the average core load is now ~ 25%). Create a virtual machine, connect 2 physical network cards to it, install Arch and configure it as a router. This virtual router is engaged in traffic shaping and other NAT, giving priority to the server, gives the rest of the channel to WiFi, which in the bridge mode distributes them to the local area.
I'm not sure that this is even possible - but you never know?

I do all this as a hobby, my income is very modest, the theoretical budget lies within 1-4 tr. - and the upper bar can be reached only if there are no real alternatives.

I ask for help in the form of advice from you, the citizens of habrausers.

Answer 1

I advise you to take Mikrotik rb750, it costs affordable money to solve your problems. there is no wi-fi in num, so you will need to connect beeline-> rb750-> wi-fi point (if you need it)

Answer 2

3. Iptables and dhcp server are enough. You open only the necessary ports for the server, that's all the protection (which the router gives).

Answer 3

4. This option works fine for me. You can put pfsense on a virtual machine, for example.

Answer 4

Indeed, there is no such thing in the DIR 400. You would be suitable for this purpose DIR 100 (it is a wired router). It has 3 types of firmware out of the box at a price of 500-600 rubles. The tuning step is 512 kbps. It works stably, but there are problems with the standard PSU. I recommend replacing it right away.

Answer 5

I would get to grips with OpenWRT. Google says that everything can be started, you just need to understand the logic of the firmware and PPP Dual Access (is this the problem?).
2,3 and 4 are, in my bitter experience, perversions that consume electricity, time and are unreliable.

Answer 6

I have Asus-520gU successfully flashed in DD-WRT - it works with a bang with a beeline.