Best hardware for advanced features

Hi,
I am rather new to OpenWrt and couldn‘t find some answer with my searches.

I have the idea to extend my router at home for multiple purposes. I would like to add:

  • LDAP server for user authentication in my LAN
  • my own root CA to create my own certificates for my LAN
  • MQTT broker to connect SmartHome devices
  • maybe some DNS based ad-blocker
  • a way to log all DNS requests from any connected device to see what‘s going on in my network
  • The LDAP schema should be extensible, so i can add my own stuff to share configuration items with the clients, e.g.

Now comes my biggest wish: i do not want to create everything from scratch but want to have the basic router functionality out of the box, so Banana Pi R3 and RPi4 are out.
Is there anybody who has a similar setup or is it maybe even so trivial any OpenWrt router would do?
The hardware of the router should be powerful enough to run all services without impacting the main job=routing AND in an ideal case it would be possible to even secure services with some container based approach.
Any advice which hardware would be suiteable?

I don't understand why, the Banana is just as much a router as the plastic ditos you buy on eBay or Amazon.

My BPI-R3 works great!
SQM with Cake is really working for my T-Mobile 5G Home Iternet connection.
I have emmc boot, and expanded filesystem for more packages.
I am happy with mine.

OpenWrt does routing by default (that's kind of the point!), so just use anything supported by OpenWrt and you have this taken care of.

The features you ask for are all implemented in software, so yes, any OpenWrt router can do all those things. That being said, you probably want something at least as powerful as a Raspberry Pi 4 or a MediaTek Filogic to do all those things, simply to give yourself some breathing room, CPU-wise and (especially) RAM-wise. The DNS ad-blocker/logger bit is probably the most demanding item in your list.

A Pi-hole on a metered connection (like wireless plans with hotspots) can cut bandwidth by 30-50%.

Ads use a lot of data. And a Pi Zero W works fine. Just set the Pi-hole with a static IP address and manually define DNS lookups to the Pi.