Arris NVG599 Passthrough Setup for Eero Pro 6E

As soon as you figure out which of those is for your download, I'll help you figure out where it is.

Pinging Us.download.nvidia.com yields  192.229.211.70 and not yahoo.

Maybe I'm not keeping up with corporate ownership, but the owner of that IP, according to ARIN (which I stated) is "Edgecast Inc.", which is a division of what used to be Verizon Digital Media, which is/was part of what was Yahoo! and is being bought and broken up and passed around, etc.  So, that's what I called it Yahoo, but you're correct, that's not serving an ad.  

So that IP is part of a CDN, not unlike Akamai, etc.  Nvidia is using that CDN to provide the download.  That IP does show up in your later netstat, so it appears that's where you're going for Akamai drivers, And you've provided a traceroute for how you get there for the non-VPN path.  How about via the VPN path?

Unfortunately, other than say that the latencies are similar to the non-VPN traceroute, there's not a lot of useful information there.  All the IP's gave host names, but the host names do not provide (me with) geographic references.

Please verify that the settings in the Eero are correct for my setup and for At&T.