What commercial router or other devices natively support WireGuard VPN Server and Client? Beyond cobbling together a custom solution or using OpenWRT, I’ve only found:
What I want is to set up a small WireGuard VPN server at home… no fuss; no building a home solution; just (more or less) plug in and go. Any recommendations?
Mikrotik RouterOS supports Wireguard in version 7.
I haven’t seen many enterprise level networking devices supporting it. Any Linux machine with the Linux kernel over a certain number (forgot) will have it built in
As a network admin though if it becomes available I would not hesitate to implement it in a production environment for site to site VPN implementations.
I wouldn’t rule out OpenWRT for home use, since these days it’s extremely mature and generally better than any consumer grade firmware. If you get a device that’s known to work well with OpenWRT it is essentially plug and play. Flashing the firmware takes no time at all, and you can configure Wireguard from the web interface in a couple of clicks.
But to answer your question: GL-inet devices have it out of the box ( but they run, you guessed it, OpenWRT 
).
It sort of depends on what you mean by “supports” now, as other companies are starting to build solutions on top of Wireguard. For instance, Ubiquiti has an easy-deploy VPN solution called Teleport, which is actually built on top of Wireguard. I suspect(but haven’t dug) that it amounts to some automation on top of Wireguard. I haven’t dug into though if there’s a way to use the official WG client with it.
WireGuard VPN Server
Remember, that isn’t a thing. WG is not a client-server VPN. Anything capable of running OpnSense or pfSense have plug-in options to add support for Wireguard, so deployment on things running those are trivial to enable it.
For your home, office or home lab, Mikrotik has several solutions for under $100.
RouterOS has a bit of a learning curve, but each of these solutions are feature-rich, professional-grade and very inexpensive (no paywalls, no subscriptions). RouterOS is fast, efficient, well maintained and extremely flexible. There are many guides and videos available you can follow the steps to get things up and running fast.
Some Asus AX routers will have WireGuard soon. They are currently beta testing firmware that supports WireGuard.
I am currently running WireGuard on my AC86U via a third party script and asuswrt-merlin firmware. Was very simple to get up and running. My primary use case is tunneling my phone traffic back through my router when on public wifi to take advantage of the ad blocker that I also have running on my router.
GL-inet products will do what your asking. That’s what I currently use and they work great.
Gl iNet Routers act like both. I use the brume model that includes AdGuard that acts as a DNS server
I’ve been building custom Debian Linux routers for over a decade. It’s really easy, once you get used to it. Switched my routers from openvpn to wireguard years ago. Works great. Solid and reliable. My entire home network stays permanently connected to a vpn server, so no leaks ever. Wire speed is easy too, the latest i3’s can handle gigabit speeds for encrypting wireguard packets.
GL Inet very good for the price and UI ok but you can use any raspberry PI with HostAPd and just setup the wg client and u may save a lot and freely set it up, even add tethering for no extra cost on a regular mobile plan by plugging a spare android 5g phone to it. Will then fly.
FritzBox routers have Wireguard, but I don’t know if they’re being sold outside of Germany?
I’m running a wireguard server in a Ubuntu VM at home and using GL Inet micro router on the go for my laptop. Also using wireguard on my phone. It was surprisingly easy to set it up (on the phone)
keenetic.com - models that they sell through amazon.* in europe have native support for wireguard.
You can get a better idea of what is supported by reading articles starting at
https://help.keenetic.com/hc/en-us/articles/360010592379-WireGuard-VPN
Protectli, Vilfo VPN router
and it works excellent…
5.6 according to this link
GL iNet are great value. Ever since RPis got scarce and crazy expensive scalped, I’ve been using GL iNet devices for remote access all over the place. Just install LuCi and go to town.
AdGuard doesn’t act as a DNS server, it IS the DNS server.
I have a “GL.iNet GL-MT300N-V2(Mango) Portable Mini Travel Wireless Pocket VPN Router” in my cupboard which I haven’t used much, but planned to take with me traveling on my upcoming trip as the _client_ to my VPN.
Would the exact same device also act as a server if I left it at home, so that from Japan I can connect to my home network ?
Basically while in Japan I want to be able to access US netflix and youtube tv.
I have considered while in Japan just connecting to a VPN service, but the one I use (PIA) seems to be known to most streaming services which block me.