OPNsense turns an old PC with two network cards into a serious network gatekeeper: intrusion detection, traffic shaping, VPN endpoints and per-rule control, all free and open source. Forked from pfSense in 2015 and updated with impressive discipline.
You supply the hardware and the patience to learn an enterprise-grade interface. In return, your entire network answers to you and nobody else.