For my home setup, I run pfSense on top of QEMU/KVM on an i7 Haswell 1U box with 2 eth ports. I have a bridge for each eth instead of IOMMU. I can max out the 1

For my home setup, I run pfSense on top of QEMU/KVM on an i7 Haswell 1U box with 2 eth ports. I have a bridge for each eth instead of IOMMU. I can max out the 1gbps ethernets without a huge hit. I then have a Mikrotik Gigabit 24 port switch that everything gets hooked into. A bit overkill, but it's nice to have.