VPN Systems

Mullvad VPN (https://mullvad.net/) is the only true anonymous and private VPN. They do not keep logs or accounts. You can even pay cash. VPN is $6/mo for 5 devices. Doing a multi-hop VPN between Dallas to Atlanta to Toronto and back resulted in download mbps of 660 and upload of 36 (Comcast business internet).

Setup:

• Mullvad App on Graphene OS phone downloaded via F-Droid. This allows user to keep VPN on mobile devices. Mullvad App on Desktop computers. Apps for mobiles + desktops are to allow for easier customization.
• WireGuard Mullvad VPN through your router. Set for all traffic EXCEPT for the devices that prove more problematic to be on VPN (gaming sessions, hosting, etc).

Settings (Personal device like phone/PC):

• DAITA: On, this reduced download to 212 (from 660) but upload remained the same. Turn off if internet speed is too slow.
• Multihop: On, I leave this on by default. This further obfuscates your internet traffic by sending it between two VPN servers.
• VPN Settings
  • Launch on startup: Yes, always a good idea. You can opt to turn the VPN off as needed but leave it on as default.
  • Auto-connect: Yes, quality of life.
  • Local network sharing: Most of the time, yes.
  • DNS content blockers, I'm using:
    • Ads: Yes
    • Trackers: Yes
    • Malware: Yes
    • Gambling: Yes
    • Adult Content: No
    • Social Media: No
  • Kill Switch: Yes, this means if you can't connect to a VPN server then your phone will not try to use regular internet instead. It "kills" the internet.
  • Quantum-resistant tunnel: Yes, idk why, sounds cool.

Everything else is default. I set my server to a local area so that the internet still behaves as if I'm local even though I'm routing through two VPN servers.

Settings (GLiNET Router)

• Kill Switch, Yes
• Services from GL.iNet use VPN, No
• Allow remote access to the LAN subnet, yes
• IP masquerading, yes
• mtu, optional

In general, I set the rules to exclude the devices that manage their VPN connections locally (phones/pc) and for any device that might have issues with VPN usage (netflix tvs or something).