wow let me update after 1 yr.

brumeW stopped sales as no more chipset, due to USA boyscott China IT?

And now GL inet come with CHINA made CPU (something like that), which is SF1200, and SFT1200 (opal).

I bought SF1200, then cant resist to buy opal…

my config now:

for internet connected intranet:

BrumeW as perimeter router, but NOTHING was installed as openwrt say this is most safe.
under brumeW there is TPLINK, with rubbish websites blocked. I cant control myself.
ALso under brumeW there will be opal (arriving next week), it will dual-use as my travel router.
At home opal is connected to a timer plugin, so i can control my internet time.

for air gapped network (protected from USA sensorship, prism project etc etc).
the SF1200 will be installed.

the SF1200 and SFT1200 are very cost effective (aka cheap price).

openwrt/GL inet routers are good.
the TP link could be replaced with another openwrt too.