Consumer grade router capable of IPsec traffic on a stick

Is anyone aware of a consumer grade router with the ability to act as an IPSec concentrator, accept inbound client connections and hairpin the client traffic back to the internet? Even something I can flash with open firmware would be acceptable. Something with wireless capabilities would be preferred.

Thanks in advance for any suggestions.