Right now I’m using a Fortigate 101E, but eons back I used a simple PC built as cheaply as possible, installed Linux, ip_forward = 1, and iptables.
I am, however, tempted to build something semi-professional based on a banana pi, as I need something custom for work.