I have bare metal servers run Proxmox on. Can run most of this stuff in LXC. I also have StrongSwan with IPSec tunnels from home to the dedicated server. Can obfuscate my home IP through it. Along with running Tor proxy and two different VPN providers I randomize via a script. Most people use OPNsense or pfsense for this but I use OpenBSD VM with dedicated NICs for it.