Router Hardware

There are several possible options for hardware routers

Features	Protectli Vault (6 port)	EdgeRouter (Lite)
Processor	Intel, 2-6 cores	MIPS64, Dual Core
RAM	Up to 64GB	512MB
Storage	Up to 32GB (or 1TB for virtualization)	2GB
Hardware Acceleration	AES-NI	IPsec, NAT, GRE, and other offloading
OpenVPN	Depends on OS	Yes
IPsec	Depends on OS	Yes
Wireguard	Depends on OS	Yes (via package)
GRE	Depends on OS	Yes

The EdgeRouter model, as well as some more powerful models, simply don't fit the bill even though their software is top-notch. The lack of RAM could be an issue when dealing with large route tables, and from experience offloading doesn't do enough to make up for the slow processor. The Protectli models are definitely powerful enough, and make a viable alternative to virtualizating the router. Being more generalized, AES-NI could accelerate OpenVPN and IPSec (though not Wireguard), making it also viable as a VPN concentrator.

Other models such as Cisco and Juniper multi-layer switches were considered, but in part due to a lack of familiarity with the entire Cisco ecosystem and in part because of a lack of versatility, such as being able to run multiple VPNs and routing daemons, I don't believe they would be a good choice.