Gl MT6000 seems to do the trick
https://www.gl-inet.com/products/compare/
Home router firmwares aren't big on VPN, so you might find a model on which you can flash openwrt. Glinet routers come with it from factory, which is why they focus on VPN speed.
You can also try a router+AP solution using a raspberry pi+openWRT or some x86 solution with opensense or ipfire and use something like a wax202/206 with a flashed openwrt as AP.
The openwrt forum might be a better place to get better answers.