I’m not sure if I’d use pfsense but some of the advice here is quite useful.