[3np]

I think the point is that it'd make a lot more sense with 2.5GLAN/1GWAN than the reverse, given that limitation?

[ssl-3]

Perhaps.

And they can certainly be reversed: They're just Ethernet ports on a Linux box [with a front-end routing-oriented configuration/distro widget called OpenWRT]. They can do whatever tasks a person wishes to assign them to do.