Something like the Netgear GS105 or 108 (5 port or 8 port) are just tanks, and a small footprint. To keep it simple, I'd avoid pfSense/opnSense or any of the more DIY sort of thing. I'd also avoid ...