Martin, you’ve been extremely helpful.
I’m sorry that I had signed up at vultr before seeing your referral link, I would have used it.
Since so much of my network design that has built up piecemeal over the years is having to be touched/modified, I’ve taken the time to sit down and design something from scratch rather than just letting it morph like it has in the past. On top of that, I’m learning opnsense. While it’s a descendant of m0n0wall, I’ve not used a packaged firewall system since a few years before m0n0wall stoppped developlment, and pfsense was still very new software. lol Mostly I’ve used my peplinks and at work cisco firewalls.
The process is definitely taking a lot longer than “add a second IP”, but I think this is building the foundation for a better (and arguably more secure) network long term.
Thanks again for everything,