I have pfsense running as my home router as a VMware server on a Windows Home Server host, which uses the client PFsense machine as an internet gateway. Kind of weird, but seems to work perfectly well ...

Will look into fwbuilder but so far was planning to go with a server distro (no GUI) and was hoping to get by using iptables directly for NAT. With regards to bufferbloat, I had run the DSL reports ...