This is also a feature on Pfsense, or just about any high end router, switch, or firewall.

The article asserts, "It expands the attack surface and most of this isn't covered by traditional defenses", which is bogus. It's just another device that doesn't need to be on the same network as critical services.