I have a cute Raspberry Pi 2 router running Raspbian Jessie. It connects to a VPN using OpenVPN on tun0 and redirects all the wireless (wlan0) traffic into tun0. This is done by using these iptables rules:
iptables -A FORWARD -o tun0 -i wlan0 -s 192.168.1.1/24 -m conntrack --ctstate NEW -j ACCEPT
iptables -A FORWARD -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
iptables -t nat -F POSTROUTING
iptables -t nat -A POSTROUTING -o tun0 -j MASQUERADE
I would like to setup another OpenVPN connection and channel all the traffic directly generated by the router into it.
The goal is to have 2 separated openvpn processes, hence to use two cpu cores and load-balance the cutie, since a single RPi2 core would be maimed by all the encryption work.
Am I thinking right? Is it possible? How can I do it?