I use an Asus router, flashed with Merlin firmware, pretty popular. Supports the usual VPN servers and clients. Works perfectly.
You can also configure a wireguard file on Scale as wireguard is built in, thus installing no apps. Just route the wireguard port to Scale on the router.