I use an EdgeRouter Lite running OpenBSD-current with a deny by default firewall configuration. It's a cheap device and, although OpenBSD does not take advantage of hardware acceleration, it works fine for my network speeds.
I followed this guide to set it up...