When searching for the best business router with VPN, the focus is on balancing robust security, reliable performance, and manageability. The Omada ER7412-M2 stands out as the overall best for its multi-gigabit speeds and comprehensive VPN options. The GL.iNet GL-BE9300 Flint 3 offers excellent Wi-Fi 7 support, making it ideal for future-proofing your network. However, these routers come with tradeoffs—higher security often means increased complexity, and faster speeds can come at a higher cost. Continue reading for a detailed breakdown of the top options to help you find the best fit for your business needs.
Get the latest gadgets delivered free — and shop member deals
- Fast, free delivery on millions of items
- Access to Prime Big Deal Days deals on October 6–7
- Prime Video, Amazon Music and more included
Complete the kit
Key Takeaways
- The top routers combine high-speed connectivity with advanced VPN features for seamless remote security.
- Price and complexity tend to increase together; more features often mean a steeper learning curve.
- Wi-Fi 6 and Wi-Fi 7 support are common among the best options, future-proofing your network.
- Multi-WAN and load balancing are key features for businesses needing high availability.
- Travel routers and compact models are viable for mobile or remote work, but may sacrifice some advanced features.
| Omada ER7412-M2 Multi-Gigabit VPN Router |  | Best Overall Business VPN Router for Reliability and Security | WAN/LAN ports: 2× 2.5G RJ45, 8× Gigabit (including SFP) | Load balancing: Yes, on up to 11 WAN ports | VPN support: SSL, IPSec, GRE, WireGuard, PPTP, L2TP, OpenVPN | VIEW LATEST PRICE | See Our Full Breakdown |
| GL.iNet GL-BE9300 Flint 3 Tri-Band Wi-Fi 7 Router |  | Best for High-Speed, Large Device Networks | Wi-Fi Standard: Wi-Fi 7 | Speed: Up to 9 Gbps | Number of Bands: Tri-band | VIEW LATEST PRICE | See Our Full Breakdown |
| Omada ER706W Gigabit AX3000 WiFi 6 VPN Router |  | Best for Future-Proof WiFi 6 Security and Mesh Expansion | WiFi Standard: AX3000 WiFi 6 | Max Speed: 2402 Mbps on 5 GHz, 574 Mbps on 2.4 GHz | Ports: 1x Gigabit SFP, 5 Gigabit RJ45 | VIEW LATEST PRICE | See Our Full Breakdown |
| TP-Link ER605 Wired Gigabit VPN Router |  | Best for Flexible, Multi-WAN Wired Networks | Number of Ports: 5 Gigabit ports | USB WAN Port: Yes | VPN Support: Up to 20 IPsec, 16 OpenVPN, 16 L2TP, 16 PPTP | VIEW LATEST PRICE | See Our Full Breakdown |
| GL.iNet GL-BE3600 Slate 7 Wi-Fi 7 Travel Router with Touchscreen |  | Best Portable Travel Router with VPN and Customization | Wireless Speed: 688Mbps (2.4G) + 2882Mbps (5G) | Ethernet Ports: 2.5G (1 WAN, 1 LAN) | USB Port: USB 3.0 | VIEW LATEST PRICE | See Our Full Breakdown |
| TP-Link ER7206 Multi-WAN Professional Wired Gigabit VPN Router |  | Best for Enterprise-Grade Security and High Device Capacity | Ports: 1 Gigabit SFP WAN, 1 Gigabit WAN, 2 Gigabit WAN/LAN, 1 Gigabit LAN | Maximum Clients: 150,000 | Maximum Clients per Network: 700 | VIEW LATEST PRICE | See Our Full Breakdown |
| GL.iNet GL-AXT1800 Slate AX Pocket-Sized Wi-Fi 6 Travel Router with VPN |  | Best for Portable, Secure Travel Networking | Wi-Fi Standard: Wi-Fi 6 (802.11ax) | Dual-Band: Yes | Maximum Speed: 1800 Mbps | VIEW LATEST PRICE | See Our Full Breakdown |
| TP-Link AXE5400 Tri-Band WiFi 6E Router (Archer AXE75) |  | Best for High-Speed, Low-Latency Multi-Device Environments | WiFi Speed: up to 5400 Mbps | Bands: Tri-Band (6 GHz, 5 GHz, 2.4 GHz) | Processor: 1.0 GHz dual-core CPU | VIEW LATEST PRICE | See Our Full Breakdown |
| GL.iNet GL-MT6000 Flint 2 Wi-Fi 6 Gaming Router with Dual 2.5G Ports |  | Best for Gaming and Streaming with VPN Security | Wi-Fi Standard: Wi-Fi 6 | Max Speed: 6 Gbps | Ports: Dual 2.5G ports | VIEW LATEST PRICE | See Our Full Breakdown |
| business router with vpn | VPN support |
|---|---|
| Omada ER7412-M2 Multi-Gigabit | SSL, IPSec, GRE, WireGuard, PPTP, L2TP, OpenVPN |
| GL.iNet GL-BE9300 Flint 3 Tri- | — |
| Omada ER706W Gigabit AX3000 Wi | — |
| TP-Link ER605 Wired Gigabit VP | Up to 20 IPsec, 16 OpenVPN, 16 L2TP, 16 PPTP |
| GL.iNet GL-BE3600 Slate 7 Wi-F | OpenVPN, WireGuard |
| TP-Link ER7206 Multi-WAN Profe | LAN-to-LAN IPsec, OpenVPN, L2TP, PPTP |
| GL.iNet GL-AXT1800 Slate AX Po | OpenVPN, WireGuard |
| TP-Link AXE5400 Tri-Band WiFi | Yes (OpenVPN, PPTP, L2TP) |
| GL.iNet GL-MT6000 Flint 2 Wi-F | — |
More Details on Our Top Picks
Omada ER7412-M2 Multi-Gigabit VPN Router
The Omada ER7412-M2 stands out for its high-speed multi-Gigabit ports and comprehensive security features, making it ideal for managing demanding business networks. Its load balancing across up to 11 WAN ports offers excellent redundancy, outperforming many competitors like the GL.iNet GL-BE9300 in hardware robustness. However, its setup can be complex, requiring technical expertise, and it lacks wireless capabilities, which limits flexibility for smaller or wireless-dependent offices. Compared to more consumer-focused options, this router prioritizes security and stability over ease of use or wireless features, making it perfect for IT-managed networks in larger organizations.
Pros:- High-speed multi-Gigabit ports with load balancing
- Robust security including VPN, DoS/DDoS protection
- Supports multiple VPN protocols for flexible remote access
Cons:- Complex setup requiring technical expertise
- Limited wireless capabilities, not a wireless router
Best for: IT professionals managing enterprise-level networks needing robust security and load balancing.
Not ideal for: Small business owners or remote workers seeking an easy-to-set-up wireless solution.
- WAN/LAN ports:2× 2.5G RJ45, 8× Gigabit (including SFP)
- Load balancing:Yes, on up to 11 WAN ports
- VPN support:SSL, IPSec, GRE, WireGuard, PPTP, L2TP, OpenVPN
- Security features:DoS/DDoS protection, IP/MAC/URL filtering, DPI, IPS/IDS
Our verdict“This router is best suited for technical teams needing reliable, secure, and high-capacity network management in larger business environments.”
GL.iNet GL-BE9300 Flint 3 Tri-Band Wi-Fi 7 Router
The GL.iNet GL-BE9300 Flint 3 offers blazing-fast Wi-Fi 7 speeds up to 9 Gbps and supports over 100 devices, making it ideal for high-density environments like conference centers or busy offices. Its tri-band setup with advanced MLO and OFDMA technology provides stable connections even during peak usage, surpassing traditional dual-band routers like the GL.iNet GL-BE3600. However, setup can require firmware updates, and high speeds depend on your ISP and environment. This device is a clear choice for businesses needing extensive coverage and capacity, though it may be overkill for smaller setups or casual use.
Pros:- Ultra-fast Wi-Fi 7 speeds up to 9 Gbps
- Supports large networks with over 100 devices
- Advanced features like MLO and parental controls
Cons:- Setup may require firmware updates
- Performance depends heavily on ISP and environment
Best for: Tech-savvy organizations needing ultra-fast Wi-Fi with high device capacity.
Not ideal for: Small offices or users with limited technical skills who prefer plug-and-play devices.
- Wi-Fi Standard:Wi-Fi 7
- Speed:Up to 9 Gbps
- Number of Bands:Tri-band
- Maximum Coverage:2000 sq ft
- VPN Speeds:Up to 680 Mbps
- Device Capacity:Over 100 devices
Our verdict“This router makes the most sense for large, tech-forward businesses demanding maximum speed and device support.”
Omada ER706W Gigabit AX3000 WiFi 6 VPN Router
The Omada ER706W combines WiFi 6 speed with mesh capabilities, making it suitable for expanding office networks that want reliable coverage and security. Its AX3000 speeds outperform older WiFi standards, and the multiple Gigabit ports support flexible connections, similar to the Omada ER7412-M2 but with integrated WiFi that the latter lacks. The setup can be complicated, especially for those unfamiliar with mesh systems, and the price isn’t specified, which could be a barrier for smaller businesses. It’s an excellent choice for offices planning to scale with secure WiFi, but less so for simple, static network environments.
Pros:- Fast WiFi 6 speeds with dual-band support
- Supports mesh networking for extended coverage
- Multiple gigabit ports and SFP slot for flexible connectivity
Cons:- Setup complexity may require technical skills
- No built-in modem functionality
Best for: Growing businesses seeking fast WiFi 6 security with mesh capabilities for office expansion.
Not ideal for: Small businesses or remote workers who only need a straightforward wired or simple wireless setup.
- WiFi Standard:AX3000 WiFi 6
- Max Speed:2402 Mbps on 5 GHz, 574 Mbps on 2.4 GHz
- Ports:1x Gigabit SFP, 5 Gigabit RJ45
- Mesh Compatibility:Yes
- Load Balancing:Up to 5 WAN ports
Our verdict“This router suits organizations looking for future-ready WiFi 6 security and scalability, provided they can handle the setup complexity.”
TP-Link ER605 Wired Gigabit VPN Router
The TP-Link ER605 offers a solid wired solution with five gigabit ports, including multiple WAN options for load balancing or failover, making it suitable for businesses that prioritize wired connections over wireless. Unlike the Omada ER7412-M2, it focuses on wired resilience rather than security-heavy features, but it supports VPN protocols like IPsec, OpenVPN, and L2TP, similar to higher-end models. Its lack of wireless features limits use in wireless-dependent environments, and setup may be challenging for less technical users. This router is ideal for offices needing multiple wired connections with VPN security, but less so for wireless or mobile setups.
Pros:- Multiple WAN ports for load balancing and backup
- Supports a wide range of VPN protocols
- Flexible bandwidth management
Cons:- Complex setup for non-technical users
- No wireless capabilities
Best for: Businesses with a predominantly wired infrastructure requiring flexible bandwidth management and VPN security.
Not ideal for: Remote workers or small offices seeking integrated WiFi or simple plug-and-play setup.
- Number of Ports:5 Gigabit ports
- USB WAN Port:Yes
- VPN Support:Up to 20 IPsec, 16 OpenVPN, 16 L2TP, 16 PPTP
- Security Features:Firewall, DoS defense, filtering
Our verdict“This router suits wired-centric offices needing reliable VPN and bandwidth flexibility without wireless features.”
GL.iNet GL-BE3600 Slate 7 Wi-Fi 7 Travel Router with Touchscreen
The GL.iNet GL-BE3600 Slate 7 combines portability with high-speed Wi-Fi 7, offering a touchscreen for easy management and open-source firmware for customization. While it can serve as a secure travel companion with VPN client and server support, its speed of up to 2.9 Gbps on 5 GHz is lower than fixed-location routers like the GL.iNet GL-BE9300, but the touchscreen and open-source flexibility make it ideal for tech-savvy travelers. Its setup can be complex for those unfamiliar with VPN configurations, and active VPN subscriptions are necessary for full security. This device is best for mobile professionals needing secure, customizable internet access on the go rather than high-capacity office use.
Pros:- High-speed Wi-Fi 7 dual-band support
- User-friendly touchscreen interface
- Open-source firmware for extensive customization
Cons:- Requires active VPN subscription for full security
- Setup may be complex for non-technical users
Best for: Travelers and remote workers needing secure, customizable Wi-Fi on the move.
Not ideal for: Large offices or users requiring maximum speed and device capacity at a fixed location.
- Wireless Speed:688Mbps (2.4G) + 2882Mbps (5G)
- Ethernet Ports:2.5G (1 WAN, 1 LAN)
- USB Port:USB 3.0
- Firmware:OpenWrt 23.05
- VPN Support:OpenVPN, WireGuard
- Size:Portable/Travel-friendly
Our verdict“This travel router is perfect for security-conscious professionals who need portable, customizable Wi-Fi with VPN support.”
TP-Link ER7206 Multi-WAN Professional Wired Gigabit VPN Router
The TP-Link ER7206 stands out for its ability to support up to 150,000 clients, making it ideal for large business environments. Its multiple WAN ports allow for load balancing and redundancy, which is a step above the single WAN options like the GL.iNet GL-AXT1800. While its cloud management and SDN compatibility provide advanced control, the setup can be complex, requiring technical expertise—this isn’t a plug-and-play device. Compared with consumer-focused routers, its security features like firewall and DoS defense are more comprehensive, but the lack of clear pricing and detailed cloud plans can be a hurdle for smaller businesses. This router is best suited for IT teams managing enterprise networks that need high capacity, security, and multi-WAN support but are prepared for a steeper learning curve.
Pros:- Supports multiple WAN connections for optimized bandwidth
- Handles up to 150,000 clients, suitable for large networks
- Cloud management and SDN support for centralized control
- Robust security features including firewall and DoS defense
Cons:- Setup and configuration require technical expertise
- Limited transparency on cloud service plans and costs
Best for: Large enterprises or managed service providers needing multi-WAN, high device capacity, and advanced security
Not ideal for: Small businesses or home offices that prefer simple setup and lower cost
- Ports:1 Gigabit SFP WAN, 1 Gigabit WAN, 2 Gigabit WAN/LAN, 1 Gigabit LAN
- Maximum Clients:150,000
- Maximum Clients per Network:700
- VPN Support:LAN-to-LAN IPsec, OpenVPN, L2TP, PPTP
- Security Features:Firewall, DoS defense, IP/MAC/URL filtering
Our verdict“This router is ideal for large organizations with technical resources seeking enterprise-grade security and multi-WAN flexibility.”
GL.iNet GL-AXT1800 Slate AX Pocket-Sized Wi-Fi 6 Travel Router with VPN
The GL.iNet GL-AXT1800 offers a compelling combination of Wi-Fi 6 speed, VPN support, and portability, making it perfect for frequent travelers who need a secure connection on the go. Its dual-band speeds up to 1800 Mbps are faster than many travel routers like the GL.iNet GL-MT6000, which focuses more on gaming performance. The open-source OpenWrt 21.02 OS allows for extensive customization, but this flexibility requires a degree of technical know-how—users unfamiliar with network configuration may find it daunting. Its built-in VPN (OpenVPN and WireGuard) and security protocols like WPA3 ensure safe browsing, but toggling functions can be confusing, and coverage is limited for very large or multi-room environments. This device is best for traveling professionals or remote workers who prioritize security and customization in a compact form factor.
Pros:- Supports Wi-Fi 6 with fast dual-band speeds
- Built-in VPN support for secure browsing
- Runs on customizable OpenWrt OS
- Offers USB NAS file sharing
Cons:- Configuration complexity for toggle and advanced features
- Limited coverage, not suitable for large areas
Best for: Travelers and remote workers needing secure, customizable Wi-Fi on the go
Not ideal for: Users seeking simple plug-and-play setup or coverage for large homes
- Wi-Fi Standard:Wi-Fi 6 (802.11ax)
- Dual-Band:Yes
- Maximum Speed:1800 Mbps
- VPN Support:OpenVPN, WireGuard
- Control Method:App
- Coverage:Moderate to Large
Our verdict“This router is best suited for tech-savvy travelers who need a portable, secure, and customizable Wi-Fi solution.”
TP-Link AXE5400 Tri-Band WiFi 6E Router (Archer AXE75)
The TP-Link AXE5400 Archer AXE75 delivers blazing speeds up to 5400 Mbps across three bands, including the new 6 GHz band, making it ideal for demanding gaming, 4K streaming, and dense device environments. Its tri-band setup provides a significant bandwidth advantage over dual-band routers like the GL.iNet GL-AXT1800, especially when multiple users are active simultaneously. While its support for VPN (OpenVPN, PPTP, L2TP) adds security, the router’s advanced features can overwhelm casual users, and the price isn’t specified, which might be a barrier for budget-conscious buyers. Additionally, it requires a compatible modem and an understanding of network setups. This router makes the most sense for tech-savvy households or small offices with high-speed needs and multiple devices who want cutting-edge Wi-Fi 6E performance combined with VPN security.
Pros:- Tri-band Wi-Fi 6E with 6 GHz band for low latency
- Supports multiple devices via OFDMA technology
- Built-in VPN server and client support
- EasyMesh compatibility for expanded coverage
Cons:- Requires a modem compatible with your ISP
- Advanced features may be complex for non-technical users
Best for: High-demand households or small offices needing fast, low-latency Wi-Fi with VPN support
Not ideal for: Casual users or those without a compatible modem seeking simple setup
- WiFi Speed:up to 5400 Mbps
- Bands:Tri-Band (6 GHz, 5 GHz, 2.4 GHz)
- Processor:1.0 GHz dual-core CPU
- Memory:512 MB
- Supports EasyMesh:Yes
- VPN Support:Yes (OpenVPN, PPTP, L2TP)
Our verdict“This router is perfect for users seeking the latest Wi-Fi 6E speeds with integrated VPN for demanding, multi-device environments.”
GL.iNet GL-MT6000 Flint 2 Wi-Fi 6 Gaming Router with Dual 2.5G Ports
The GL.iNet GL-MT6000 Flint 2 excels in high-speed gaming and streaming, offering speeds up to 6 Gbps and support for over 100 devices simultaneously. Its dual 2.5G ports provide fast wired connections, outperforming many standard routers like the TP-Link ER7206 in raw speed and device support. The built-in VPN support (WireGuard and OpenVPN) ensures secure browsing, and its Wi-Fi 6 standard delivers low latency for gaming, making it a versatile choice for gamers and streamers. However, performance can vary depending on the network environment, and initial setup might require firmware updates. Its focus on gaming and VPN security makes it less suited for typical office use where multi-WAN or enterprise features are needed. This router is best for gamers and streamers needing high-speed, low-latency connections with VPN support.
Pros:- High-speed Wi-Fi 6 with low latency for gaming
- Dual 2.5G ports for fast wired connections
- Supports over 100 devices simultaneously
- Built-in VPN support for secure browsing
Cons:- Performance may depend on network environment
- Initial setup requires firmware updates
Best for: Gamers and streamers prioritizing high speed and VPN security
Not ideal for: Small offices or home networks needing multi-WAN or enterprise features
- Wi-Fi Standard:Wi-Fi 6
- Max Speed:6 Gbps
- Ports:Dual 2.5G ports
- Device Capacity:Over 100 devices
- VPN Speed:up to 900Mbps (Wireguard), 880Mbps (OpenVPN)
- Security:Built-in VPN support
Our verdict“This router is ideal for gamers and streamers who want top-tier Wi-Fi 6 speeds combined with VPN security in a compact package.”
How We Picked
These products were evaluated based on a combination of performance, security features, ease of management, build quality, and value. Priority was given to routers that support enterprise-grade VPN options, multi-WAN capabilities, and high-speed Wi-Fi standards. We also considered user interface design and firmware reliability, ensuring the selection would suit small to medium-sized businesses with varying technical expertise. The ranking reflects a balance of these factors, favoring models that offer the best combination of security, speed, and usability for business environments.| business router with vpn | VPN support |
|---|---|
| Omada ER7412-M2 Multi-Gigabit | SSL, IPSec, GRE, WireGuard, PPTP, L2TP, OpenVPN |
| GL.iNet GL-BE9300 Flint 3 Tri- | — |
| Omada ER706W Gigabit AX3000 Wi | — |
| TP-Link ER605 Wired Gigabit VP | Up to 20 IPsec, 16 OpenVPN, 16 L2TP, 16 PPTP |
| GL.iNet GL-BE3600 Slate 7 Wi-F | OpenVPN, WireGuard |
| TP-Link ER7206 Multi-WAN Profe | LAN-to-LAN IPsec, OpenVPN, L2TP, PPTP |
| GL.iNet GL-AXT1800 Slate AX Po | OpenVPN, WireGuard |
| TP-Link AXE5400 Tri-Band WiFi | Yes (OpenVPN, PPTP, L2TP) |
| GL.iNet GL-MT6000 Flint 2 Wi-F | — |
Factors to Consider When Choosing Best Business Router With Vpn
Choosing the best business router with VPN involves several key considerations that go beyond basic specifications. Understanding your network’s security needs, future growth plans, and technical capabilities helps narrow down the options. It’s also vital to consider the tradeoffs between speed, complexity, and cost, as more advanced features often come with steeper learning curves or higher prices. Here are some factors to keep in mind:Security and VPN Capabilities
The primary reason for selecting a business router with VPN is security. Look for models that support enterprise-grade VPN protocols like OpenVPN, IPsec, or WireGuard. The ability to create secure remote access or site-to-site VPNs is essential for protecting sensitive data. Be aware that more robust VPN features often require more configuration expertise and may impact router performance if not properly optimized.
Speed and Performance
High-speed connectivity ensures that your network can handle multiple users and demanding applications without lag. Support for Wi-Fi 6 or Wi-Fi 7 can deliver faster wireless speeds and better capacity. However, faster routers tend to be more expensive and may require compatible devices to fully realize their potential. Balance your speed needs with your budget and technical comfort level.
Multiple WAN Ports and Load Balancing
For businesses requiring high availability, routers with multiple WAN ports and load balancing are invaluable. These features ensure continuous internet access even if one connection fails, reducing downtime. While they add complexity, they are a worthy investment for critical operations where connectivity stability is paramount.
Ease of Management and Firmware
Managing a business router should be straightforward, even for those without extensive technical backgrounds. Look for models with intuitive interfaces, clear firmware updates, and good support. Advanced features like VPN can be complex, so a user-friendly management dashboard can save time and reduce configuration mistakes.
Size, Portability, and Future-Proofing
If your business involves travel or remote sites, compact and portable routers with VPN are worth considering. However, these models often sacrifice some advanced features. Conversely, investing in a future-proof router with support for the latest Wi-Fi standards and higher capacity can extend the lifespan of your network infrastructure, but at a higher initial cost.
Frequently Asked Questions
Can I set up a business VPN on any router?
Not all routers support VPN features, especially those designed for home use. Business-grade routers typically support various VPN protocols and offer more configuration options. Before choosing, verify that the router supports the VPN protocols you plan to use, such as OpenVPN, IPsec, or WireGuard, and that the firmware allows for easy setup and management.
How much should I budget for a business router with VPN?
The price range varies widely depending on features. Basic models may cost under $200, suitable for small offices with minimal VPN needs. Mid-range options, around $300–$600, offer better performance and more advanced VPN features. Premium models exceeding $700 provide enterprise-level security, multi-WAN, and high-speed Wi-Fi support. Align your budget with your security, speed, and scalability needs.
Is Wi-Fi 6 or Wi-Fi 7 necessary for a business router?
Wi-Fi 6 is currently a solid choice for most business environments, providing faster speeds and better capacity than Wi-Fi 5. Wi-Fi 7 is still emerging but promises even higher speeds and efficiency. If future-proofing is a priority and your budget allows, choosing a Wi-Fi 7 router can help ensure compatibility with upcoming devices and increased network demands.
Should I prioritize speed over security?
For most businesses, security should take precedence because data breaches and cyber threats pose serious risks. While fast speeds are important for productivity, they shouldn’t come at the expense of robust VPN and encryption features. A balanced approach that offers adequate speed along with enterprise-grade security is the best choice for sustained, safe operations.
What is the benefit of multi-WAN support in a business router?
Multi-WAN support allows a router to connect to multiple internet sources simultaneously, providing redundancy and load balancing. This feature minimizes downtime during outages and can improve overall network performance. For critical business operations, multi-WAN is a worthwhile investment, although it can add to setup complexity and cost.
Conclusion
For small businesses prioritizing overall security and ease of use, the Omada ER7412-M2 offers a reliable, feature-rich option. Larger organizations needing high throughput and multi-WAN capabilities might lean toward the TP-Link ER7206 for its scalability. If budget is a concern, the GL.iNet GL-BE9300 Flint 3 provides solid Wi-Fi 7 performance at a more accessible price point. For remote or mobile setups, the compact GL.iNet GL-AXT1800 Slate balances portability with VPN support. Your choice depends on your specific needs—security, speed, ease of management, or mobility—so weigh these factors carefully to find the best router for your business in 2026.
Halloween Picks
halloween
As an affiliate, we earn on qualifying purchases.
