^forget DD-WRT, go with pfsense or mikrotik.