If you do go the OPNSense route, just be aware you need to disable the spectre/meltdown mitigations to get reasonable performance. pfsense has them disabled by

If you do go the OPNSense route, just be aware you need to disable the spectre/meltdown mitigations to get reasonable performance. pfsense has them disabled by default. In tunables you need: hw.ibrs_disable="1" hw.mds_disable="0" vm.pmap.pti="0"