I have an ASUS RT-N66R which is several ... its features is that is can serve as an OpenVPN server. Here's how I set it up to use TLS authentication and using self signed certificates. This was done ...
At just under $300, the RT-AX86U is a definite step ... And, in fairness to Asus, the bandsteering feature might be designed with a mesh setup in mind, so once I get a chance to test it out ...