Agree - on the router, just run your OPNsense directly. You want it to be a dedicated device.