The stewards of the OPNSense project, Deciso B.V. in The Netherlands, currently sells some of their own designed hardware to help support the OPNSense project on the OPNSense Shop:
https://shop.opnsense.com/product-categorie/hardware-applian...Recently I picked up their fairly high-end DEC750 which is based on their Netboard A10 Gen 3 board, which uses an AMD Ryzen Embdedded V1500B, VLP LPDDR4 unregistered ECC memory, has an M.2 socket with a PCIe x4 NVMe SSD, three Intel i210 ports and two SFP+ ports.
Idles at 8W, about 16-17W at full tilt either pushing 10Gbps through it, or nearly 2Gbps of IPSec traffic. With much lower latency (54us) than the 150us they provide in the specs. Once Wireguard is in kernel space, I'd expect around 2Gbps using Wireguard as well (more around 900Mbps right now with it in userspace). Barely gets warm to the touch.
The DEC700 series are meant to be on a desktop or shelf, but they make a rackmount version as well. There's also older devices using AMD EPYC Embedded. Nothing they make is cheap, but it's very high quality, very high performance kit coming from an organization I trust. With my DEC750, I figure I'm good until 203x.