Raspberry PI

Amen

I have mine setup on a Supermicro itx-based machine with an Intel n3710 and 8G of RAM. It has four Intel-based ports but you can easily get away with two.

I used to run a Zotac ci323 with dual Realtek nics. Works fine for 300M up/down.

You’ll want two ports, one for WAN one for LAN and most nics will support VLANs if you need more than that. Any VPN or encryption will increase your cpu requirements. If your needs are low a cheap dual-nic Nuc like device works great.

depending on your use case these are cheap and cheerful.

https://www.newegg.com/sapphire-radeon-rx-6400-11315-01-20g/p/N82E16814202416

chances are you don’t have NAC setup on your home network, and even if you do that can be bypassed. mitigating risk means you accept the least amount of it. a company that’s comfortable with built-in backdoors is unacceptable.

https://learningnetwork.cisco.com/s/blogs/a0D3i000002SKPREA4/vlan1-and-vlan-hopping-attack

https://resources.infosecinstitute.com/topic/vlan-hacking/

any vulnerability is a risk i want to avoid, hikvision as a security camera company doesn’t care about security.

https://packetstormsecurity.com/files/166334/Hikvision-IP-Camera-Backdoor.html

was looking to setup frigate, what hardware are you using? trying to avoid hikvision or anything with known backdoors