A security router with SHDSL WAN connectivity, running a hardened OS for firewall, VPN, and network segmentation.