Which nettop to choose and are there alternative solutions?

Question

System administration

Hello. Advise on choice. There is Mikrotik, which distributes wi-fi. It is required to install privoxy or squid (cut ads, etc.), I tried to install OpenWrt using MetaRouter, and the desired Proxy is already on it, but it does not work very fast / reliable, and if we also assume that the number of users will be 20-30 , then it’s scary to stand for such a design.
It was decided to put something with the desired privoxy between the provider's cable and the router.
those. a provider’s cable is connected to the house, (for example) nettop c debian + privoxy is connected to it, mikrotik is connected locally via the second ethernet, which distributes wifi. when a user uses the Internet, the request goes to Mikrotik, then locally to the proxy, which is on the nettop, then to the Internet and back in the same way.
While nettop is in the lead. But! it should have 2 ethernet outputs. those. one provider, the second goes to Mikrotik.
Please tell me what is a fairly budget option for the implementation of the plan.
What is an inexpensive nettop with 2 ethernet ports, or is it cheaper to buy a board, which one? Maybe it's cheaper to assemble it yourself, from what? Or there is an inexpensive version of the router, on board of which you can put the same wrt.
PS I already started to think about implementation with raspberry pi + ethernet shield, save

Answer 1

As practice has shown, it is easier to deal with advertising at the user's end, that is, you put an adblock and a flashblock and live in peace.

Answer 2

Raspberry will not pull. If you install a nettop, then why in this structure is Mikrotik at all, almost all nettops have a WiFi network with which you can distribute the Internet over Wi-Fi. I would advise you to assemble on the basis of a minimama such as 2 gigabit Ethernet and Wi-Fi is already included, add a budget processor, 2-4 gigabytes of memory, power supply, a case to taste and you're done. You can also install several HDDs on such a solution and at the same time have a NAS in the kit, all in one.

Answer 3

I would think in the direction of a transparent proxy on the tick itself. cut rules can be torn out of adblock lists. how this solution is working is difficult to say, because. I always cut off everything at the end - it is "more flexible" there)) but theoretically there is not much difference.
I note that with a tick, you still have to turn traffic to a transparent proxy, simply because the android does not know how to normally natively release everything through the application proxy, for example.