Nice setup. Moving toward 3 to 4 cheap quiet 10g machines and then Proxmox HA with ceph and zfs. Want to try and make the router/firewall a low resource HA LXC/VM which is why nethserver has my attention. Do not need to do any of that, but it’s my indoor hobby while stuck at home so much these days like almost everyone else.
I use cheap used enterprise L3 switches from Brocade ICX6450 and 6610 with Ruckus unleashed AP r710 powered by POE as the backbone and pfSense as my edge router currently. Segregated IOT, guest, gaming and work Vlans with QOS. I also utilize a Transit Vlan5 for all the VLANs I want to inter-vlan routing at wire speed on the switch. Is the OPNsense wireguard implementation a package and userspace or at the kernel level? I was of the understanding that it would not be built into the kernel until freeBSd 13, but obviously do not know. Alpine linux is so incredibly small and I am currently enamored. A full install alpine-vm uses 100 MiB while an alpine-LXC uses 2-5 MiB of ram.