Pfsense firewall. There is a week long learning curve and it’s best to put it on dedicated hardware.