Feature Request: Independent VPN per WAN in Multi‑WAN Load Balancing

Hi all,

Would anyone else find it useful to run independent VPN tunnels on each WAN interface while using Multi‑WAN load balancing on GL.iNet routers? Currently, with VPN enabled, only failover mode is possible — true load balancing cannot be used simultaneously.

Earlier Multi‑WAN routers, like the TP‑Link TL‑R470T+ (2011), already offered this as a basic feature, even with older VPN protocols. I am convinced that modern GL.iNet hardware is more than capable of handling it.

If this feature would be useful for you, please reply or “like” this post — the more visible the demand, the higher the chances the PM team will prioritize it.

Thanks!

Hi

We noticed that you previously mentioned the same request. As Bruce said, we have already submitted it to the product team for evaluation.

However, the evaluation and integration of new features may not be completed quickly. We appreciate your understanding.

This thread will remain open. Everyone is welcome to share whether they have similar needs and their specific use cases, so we can better evaluate the demand and design the feature to further improve our products.

Thank you for the clarification and for keeping this thread open.

You are right that I mentioned this request earlier in other discussions. In fact, it has been almost three years since I first raised this topic. Over that time, I asked about this feature in a few different contexts (for example in router-specific threads like Flint 2 / Flint 3 and also in a firmware discussion), because originally my question was related to those particular devices.

However, over time it became clear that this is not really a router-specific question, but rather a general feature request related to GL.iNet routers that support both Multi-WAN load balancing and VPN client connections.

Looking back, it was probably not the best approach to ask about it in several device-specific or firmware threads, since the request became scattered across different discussions and therefore did not get much visibility. That is why I decided to open this separate feature request thread, so the topic can be discussed in one place and the actual demand for it can be seen more clearly.

I believe this functionality could be very useful for users who rely on multiple WAN connections for redundancy while also wanting VPN protection on all active connections.

If anyone else would benefit from this feature, it would be great if you could share your use cases here as well. That should help the team better evaluate the demand.

Thanks again for taking the time to review this request.

1 Like

Use case: Multi-WAN load balancing with full VPN protection requires additional hardware

One practical use case I’d like to share:

Let’s take a router like the GL.iNet Flint 2, which has:

  • multiple dedicated WAN ports

  • Multi-WAN load balancing

  • built-in VPN client support

However, with the current firmware, when VPN is used, the router can only operate in failover mode — true load balancing cannot be used at the same time.

If I want to have all WAN connections protected by VPN while still using load balancing, I currently need to introduce additional devices.

For example, with two wired internet connections:

ISP 1 → Brume 3 → Flint 2 (WAN1)
ISP 2 → Brume 3 → Flint 2 (WAN2)

In this setup:

  • the Brume 3 devices establish the VPN tunnels

  • the Flint 2 only performs load balancing

  • its built-in VPN capability remains unused

Another example with mixed connections:

Mobile network → Spitz Plus (VPN) → Flint 2 (WAN1)
Wired ISP → Brume 3 (VPN) → Flint 2 (WAN2)

Again, the Flint 2 is only used for load balancing.

Conclusion:

If I want true Multi-WAN load balancing and VPN protection on all active WAN connections, I currently need to purchase and operate additional hardware.

Being able to run independent VPN tunnels per WAN interface directly on the router would eliminate this complexity and make much better use of the router’s existing capabilities.

3 Likes