I used to run on PfSense with Suricata, but my SG-3100 would frequently get rebooted by the watchdog because the load was too high.

These days i just use a Ubiquiti Dream Machine Pro. The base version works just fine as well, the pro just fit better on the shelf, and i didn't need an additional AP.