Sorry I don't have time to add much info, but I have a setup I'm quite happy with. I use OPNsense (PfSense is banned in my house, with all the bad things they've done) and it seems to cover your needs too if I didn't miss something. The non-open source options are, in my opinion, awful and will at some point (if not already) be a security menace.
Edit:
If 2 Gbps is not possible within a reasonable budget, I can settle on 1 Gbps, that's plenty for me, too.
Even the very old End-of-life PC Engines APU1D (AMD T40E Bobcat) can handle 1 gbps (I have 4). If something new cannot I would look elsewhere.
For one pFsense used the domain opnsense.com to discredit OPNsense and had the domain taken away from them. They also heavily edit Wikipedia if anything negative is added. There are some pages on Google about it, but I can't be bothered to search for it atm. See pfsense @ wikipedia for the domain thing.
Comments
Sorry I don't have time to add much info, but I have a setup I'm quite happy with. I use OPNsense (PfSense is banned in my house, with all the bad things they've done) and it seems to cover your needs too if I didn't miss something. The non-open source options are, in my opinion, awful and will at some point (if not already) be a security menace.
Edit:
Even the very old End-of-life PC Engines APU1D (AMD T40E Bobcat) can handle 1 gbps (I have 4). If something new cannot I would look elsewhere.
Like?
For one pFsense used the domain opnsense.com to discredit OPNsense and had the domain taken away from them. They also heavily edit Wikipedia if anything negative is added. There are some pages on Google about it, but I can't be bothered to search for it atm. See pfsense @ wikipedia for the domain thing.
Here is one example: https://www.reddit.com/r/PFSENSE/comments/6apkkc/no_dns_reco...
That's a terrible example, random reddit post from 6 years ago with no explanation