I’ve heard good things about TP Link WAP as well. They have some that support 2.5G/Wifi6. I like pfsense if it is available in your country/budget for firewall. I use a virtual appliance but it’s essentially the same thing software wise. It has a bit of a learning curve and but it’s a very common enterprise level firewall so the skills you learn will be transferrable not just to work (if you work in IT) but also to other firewalls like fortinet, Palo Alto, etc. because the fundamental firewall principles are the same even if the GUI and specific features are not.