Best option by far is a PC with Opnsense installed on it.
1 point
If you had a pc already with two NICs, you could do sophos xg home on it or a pfsense/opnsense. I’m planning on virtualizing a VM on a cheap mini ryzen box that meets that (ace magician makes one for $300).