I just love my eBay Juniper gear. There's a fan less PoE 12 port switch which is line rate forwarding, vlans, managed, etc, the Juniper EX-2200-C (compact, fanless very large heatsink industrial design).
There's fanless Juniper SRX firewalls that'll do 1Gb/s NAT and L3 just fine.
Yah it's an old proprietary freebsd binary blob network OS to commercial silocon, but they're solid and do REST and custom controllers if that's your thing (can build overlays and calico kubernetes with bgp on em even)
