My netgear pr460x supports WireGuard with NAT & firewall; granted it’s not a consumer router.