I've been happy enough with my OpnSense firewall. Easy enough setup and configuration. I have not gone too wild and crazy with it, though. I have it running on a Protectli 4-port Vault. If you plan on running a VPN on it, make sure whatever model you purchase has AES-NI hardware support.