Hard to research this, given the unique combination of requirements I have. Bufferbloat has been major problem with the extremely asynchronous cable connection I have (300/5) from Charter. Saturate ...

Also, apparently many Linux distros install a lot of extra "fluff" porgrams, some of which can add vulnerabilities to a firewall as well. Most router distros are stripped down and only use time-tested ...