I haven't used a VPN in a while, I stopped when I realized VM were throttling VPN connections back then (they don't anymore having removed the traffic shaping.)
The Superhub 2 AC and Superhub 2 do have some VPN pass through options which made my process of getting a VPN working back then easy. If you can get your hands on a Superhub 2 AC then you would notice an overall performance increase, but they are only usable on packages up to 200Mb of speed.
Ideally, get a 3rd party WiFi supporting router for cable as that would work out better. I have a Superhub 2 and Superhub 2 AC and hub 3.0. My main hub (Superhub 2 AC) is kept in modem mode with a 3rd party WiFi router linked to it. The connection runs better that way, I have more control over it and I can get it online 50% or so quicker from point of power cycle/power up than if it was just the Superhub running in router mode.
Can anyone back this up, is it better to use the older one for VPN use? also because of what I read, VM dont let us swap stuff out, but I guess an older hub is fine?
Do you still have an old SH2ac ? If so - it is "possible" to get it reactivated - but it will be a hell of a struggle. If you don't, there is no chance.
-------------------- Services: HD TV on VIP (+ Sky Sports & Movies & BT sport), x3 V6 boxes (1 wired 2 WiFi,) SH2 in modem mode with Airport Extreme Router. On VIVID200, Talk Anytime Phone, x2 Mobile SIM only iPhones.