Edit: hardware for building a router that is.
https://man.openbsd.org/pf.conf.5
That + https://www.openbsd.org/faq/pf/example1.html were more than enough to get me going.
Throwing a NIC in an old box works well, but any board with 2 or more network connections will suffice.
I just went to a local computer shop and picked up a HP desktop which was likely off a business lease, then tossed another NIC in. It works a charm and routes gigabit just fine.
It's small, quiet and has 2 ethernet for WAN and LAN and you can plug in an official USB Wifi dongle addon and it's good to go as a router.
You need to pick a few addons from the bare machine, like memory (I went with 8GB to run many containers), ssd (I went with m2 instead of emmc) and a case.
It's x86, so you'd have maximum compatibility for architectural differences.
I learned a ton, and definitely recommend this as the next step for someone who installed a BSD in a VM and is intrigued.