[seized]

While not Linux, look at OPNSense. It's a fork of pfSense without the bad behavior of Netgate. Will run on all sorts of hardware and has been utterly reliable for me.