Tangentially related, seL4's LionsOS can now act as a router/firewall[0].

0. https://news.ycombinator.com/item?id=45959952