Which router to choose with kind control and address filtering?

Question

VPN

Hello. I must warn you right away that I know almost nothing about network hardware. Now I have a Huawei HG8147X6 router working at my house. As far as I know from the technical specifications, there should be support for GPON technology (I don’t know if this is something special or is available in all routers). I have a 1Gbps internet channel. I would be very grateful if you tell me the right choice with a router.

The main task is parental control to cut off content, messengers and social networks for little daughter's devices. I believe that messengers are apparently disabled by blocking ports, and the content is not clear to me how it should be controlled, since significant resources will be required to analyze passing traffic. It would be very good if there would be a restriction on the use of the Internet by the hour.
As a secondary task, I would like to block some addresses, like google analytics and a few ads. Now I have it implemented in the hosts file by redirecting to 0.0.0.0. My router has address blocking, but the problem is that, for example, if the site has an included JS file that is located on a blocked domain in the router, then the page goes into eternal loading (the content is rendered, but the loading on the tab continues). Can it be possible to somehow make a similar implementation, as in the hosts file on the router?
As less important tasks that you can do without are connecting only to specific addresses via VPN and IPV6 support

Thank you very much for reading my question to the end :)

Answer 1

Any device that supports OpenWrt or RouterOS can do this, for example Mikrotik devices. Which one to choose - decide for yourself according to the budget and iron functions, the software functionality will be almost identical for home devices.

Answer 2

Reliable content analysis can only be done at the endpoint. Kaspersky, in my opinion, has the entire product line.
Yes, blocking by IP can be done on Mikrotik, and it’s generally simple. It is also easy with instant messengers - you can find the addresses of all popular instant messengers in tyrnet. But there will be problems with content blocking.
Which? - https
Now every first device encrypts traffic and without bumping it is impossible to determine "where the baby elephant is going." And the task of qualitative analysis of content (for example, blocking porn) is, in principle, solvable only on the end client. Therefore, I would take a closer look at the Kaspersky line, which is installed specifically on end devices.

Answer 3

На роутере такой широкий спектр контента блокируется не особо надёжно - куда конструктивнее установить ПО на конечных устройствах.
"Безопасные" DNSы на роутере, допустим, что-то заблокируют. Но с мессенджерами это вряд ли поможет, т. к. пул их адресов может меняться - соответственно, понадобится какой-то механизм актуализации списков.