The rasbperry pi is not "daisy chained" or "in-line". It simply occupies any open router port (it could be done wirelessly but wireless is silly for critical infrastructure). If you don't have an open port, get a $20 switch.
pivpn is openvpn which is open source. Th os, raspian, is open...