I am currently using a NanoPi R4S and it worked perfectly when I had slow connection of only 100mbps, but now I got 1gpbs down and 350mbps up docsis and it can only do around 650mpbs.
I get noticeable bufferbloat on games without Cake SQM especially when other people are using the network.
I was hoping to get an intel N100 or an ARM A76.
I looked at mini PC and SBC options, but they are all insanely overpriced here in USA.
I found dirt cheap used laptops with Intel i5 1135G7 a gigabit ethernet for dirt cheap and it looks like this has way better CPU performance while still having relatively low TDP.
I am hoping to use CAKE SQM on the built in ethernet to do bufferbloat mitigation and add a USB to ethernet for LAN.
I also considered getting a used thin client with Intel N5105, but I heard it doesn't have hardware acceleration if you choose to use VPN.
Just go buy the cheapest filogic 820/830 based router. Idles at ~5w and does gigabit sqm. Flint 2 hits ~$120 on sale; has dual 2.5G ports for future network expansion. 2.5G WAN will allow you access to overprovisioned gigabit service.
First, SQM runs single-threaded, so Gigabit SQM imposes certain requirements on the processor. A recent processor running at 2+ GHz can do it; with a less recent one, you may need 3 GHz.
Second, there is no "choose to use VPN"; Gigabit VPN is even more processor-hungry than Gigabit SQM, so you need to plan for a VPN in advance. In what way, depends on the VPN. There are three separate cases, (1) OpenVPN, (2) OpenVPN with DCO, and (3) Wireguard. Those have very different hardware needs. Briefly, traditional OpenVPN runs single-threaded and benefits from AES-NI support, OpenVPN with DCO can take advantage of multiple threads and still benefits from AES-NI, and Wireguard runs multi-threaded and doesn't care about AES-NI.
Now, since you mentioned you're in the U.S., you have lots of secondary market options. Which one(s) would fit your needs, I can't tell because of the VPN issue, but if you clarify, I'll be happy to give you some pointers.