I prefer to use layer2 bridging in OpenVPN with a separate hardware device (openwrt on a wallwart router, rackmount atom board). This way my client machines ha

I prefer to use layer2 bridging in OpenVPN with a separate hardware device (openwrt on a wallwart router, rackmount atom board). This way my client machines have no idea they are on a VPN and everything gets tunneled though the VPN (no DNS leaks unless my router is misconfigured). In OpenWRT, it's basically: -setup OpenVPN with a TAP device -create a VLAN, assign some ports on the switch (optionally, a wifi SSID for VPNed wifi) -bridge VLAN with TAP device