VPN for a large number of clients and access points

Question

VPN

Good day to all. I'll tell you right away, I don't know much about this issue, that's why I'm asking.

So there is the next problem. There are a lot of cafes. Cafes want to provide open WLAN for patrons. In addition, each visitor must access the Internet through a VPN. Don't ask why, that's the requirement. In cafes, of course, there are no system administrators of their own, and therefore an option for morons is needed, plugged the device into a socket and everything works.

I imagine it in the following way. Negotiate with a VPN provider. We buy a bunch of routers with vlan. We upload some kind of program for each router. We give the program all the data of the provider.

Each instance of the router needs to be able to track, for example, how much traffic it drives and whether it works at all.

Such is the problem. Please tell me if my vision of the solution is correct, if not, where is the rake and how to get around them. Plus, I would be very grateful for advice on which VPN provider to contact, which router to buy, what programs I need. What to read, where to dig.

I will repeat once again, I am unfortunately very far from this topic, and therefore I will be glad to any advice and idea.

Maybe someone has already worked with this and we can talk more “tightly” on this topic in person?

Thanks in advance

Answer 1

At the same time, each visitor must access the Internet through a VPN.

Answer 2

and the answers to the merits of the question will be?

Answer 3

Find a network specialist and formulate your wishes to him, and not a vision of solving the problem.

Answer 4

From what I understand, the picture emerges as follows:
1. Organize the Internet in cafes, by any method, even by pigeons.
2. Buy a VPN server "somewhere out there", even from kekekeks 'a ( kebrum.com/ ) 3. Install another router
in each cafe (after the router that will distribute the Internet from the provider), which will raise VPN to VPN -server and distribute the Internet already from it. 4.… 5. PROFIT!

Answer 5

In addition, each visitor must access the Internet through a VPN.

What does it mean? Every visitor has to lift the tunnel? How far?
And so, if there is connectivity between the cafes and some central node, put brainless access points in the cafe, in the center there is a pair of controllers. The access points themselves do not require configuration at all.

Answer 6

I am the owner of a VPN based on OpenVPN, ask cafe owners what exactly they want, why they need a VPN. If they don't want the consequences of torrents, it's easier to just slaughter them.
PPTP VPN supports absolutely any router, L2TP - a little less, but also almost any router, IPSec is rarely seen anywhere, and OpenVPN has not been seen anywhere out of the box. However, everything is solved by third-party firmware.

Answer 7

Mikrotik equipment ( for example ), instead of a provider, your own server is probably better ...
Well, you need a person, of course, who will set everything up. There are still a lot of questions on the Wishlist ...