I use one as a hub/gateway for untrusted IoT devices. It hosts a separate, isolated wifi network via hostaod/dnsmasq. Clients aren't given routes to the primar

I use one as a hub/gateway for untrusted IoT devices. It hosts a separate, isolated wifi network via hostaod/dnsmasq. Clients aren't given routes to the primary network or the broader internet - they should only see the Pi and other clients (I'd eventually like to restrict access to other clients as well, but haven't played with that yet). Access to the devices is via a web server running on the Pi that relays commands and responses. Right now it's a page full of hard-coded buttons and indicators, but I eventually want to turn it into a flexible firewall-like system to make it easier to add/configure/remove clients and rules.