I'd go down the Edgerouter route to terminate connections where possible. Alternative would be a x86 based platform (pfsense, sonicwall etc)





SonicWall is not x86 based - it uses Cavium Octeon Processors.



Sorry was thinking of smoothwall, they both begin with S.....



Yes I think pfSense forked off smoothwall a few years back for a more feature-rich distro than smoothwall. I can only remember smoothwall having a failover at that time but too long ago and I have a feeling there was something about loadbalancing even then. Both are based on FreeBSD, so inherantly quite a secure system even before its locked down. There might be other options in addition to x86, at least there should be for smoothwall.