The easiest route is usually to set it up on a VPS (virtual private server), using something like OpenVPN or WireGuard, which have guides to walk you through it. Just keep in mind, with a VPS, your data still goes through that provider.
If you’ll want something to compare your setup with, the VPN Comparison Table from this subreddit is a handy resource. It breaks down features like encryption, logging, and speed across different providers in case you decide to go with a commercial VPN later.
I’ll suggest to buy two Gl.int routers (I used GLInet shadow-20€ each from aliexpress). Use one as VPN server with Wireguard at keep it at home and on another Wireguard client and take this one with you.
Works like magic and isn’t expensive.
It’s extremely easy to set up your own VPN, using a VPS from a provider that offers them in the country of your choice. Linux command line skills and basic security hardening knowledge is required. Someone made a script that automatically creates a VPN server on any standard VPS, I think this was the guide.
I want to put in a word for piVPN. I’m not using it for work as you wish to, but I do use it to give me a presence on my home networks when I’m away from them.
Another option you may or may not have considered is VNC. I use RealVNC which gives me 5 non-commercial connections for free.
The easiest way would be to get some VPS in approved locations, or setup a mini-server at home. Mini pcs are a great value, but remember not to store anything or connect it to the internet before wiping the whole drive and installing something like ubuntu.
You can also get a rpi5. RPI5 and N100 mini pcs have similsr performance, but RPIs are more efficient while N100s are more mature. I dont know if the RPI has AES decoders tho.
For VPNs, just run the PiVPN one-click install script. Doesnt get simplier than that.
If you dont have a static IP at home (usually the case), go to https://duckdns.org and create a ddns. Using the scripts provided you can update the IP so the VPN always points to the right location. Then, when prompted to input your domain/IP, enter the duckdns one.
For reference, I have pivpn with wireguard protocol delivering over 120mbps on my N100 mini pc (speed.cloudflare.com).
I would consider using a trusted commercial VPN provider if your company has no issues working abroad. I’m actually kind of surprised that they don’t have their own VPN server if that’s the case.
If you are abroad, who is going to maintain your equipment at home? What if you suffer a power outage? What if your equipment crashes? With a commercial VPN provider, you won’t have to worry about the maintenance of the host connection.
I set up OpenVPN on 443 port TCP in my home router.
It looks like typical https connection (if you don’t look inside) from firewall point of view.
I have static IP , but if you have dynamic one, I suppose you can configure ddns (dynamic DNS).
Tailscale with an exit node is likely the easiest setup. I haven’t used their new devices but have had success with them years ago, but GL inet makes a box to hardwire at one end and a Wi-Fi router on the other that can handle tailscale. You connect your laptop to the Wi-Fi of the little router and the router does the VPN connection back to your home and unless your laptop has GPS it thinks it’s in the other location.