OPNsense would be a nice firewall to have running. Great web based management and ability to expand functionality with add-ons. OPNsense runs on top of HardenedBSD.

HardenedBSD is FreeBSD with strong ASLR. https://hardenedbsd.org/content/easy-feature-comparison

OPNsense should be pretty robust solution for those who needs a cheap and reliable VPN tunnel. E.g. against Azure.