RPi 3. I'm going to turn it into a VPN server
Worst idea possible. Better throw your RPi 3 away. Broadcom or the mythical RPi Foundation forgot to license ARMv8 crypto extensions so RPi 3 simply sucks at AES encryption/decryption: https://forum.armbian.com/topi…findComment&comment=37829
Better choose any other 64-bit ARM board you can get (except ODROID-C2 -- the other device that lacks ARMv8 crypto support) and configure your VPN to use AES. Will be magnitudes faster.