If you could relinquish to the 10G LAN port in some way may be the mikrotik rb5009 fits your needs. It has 1x 10G sfp+, 1x 2,5G and the rest are 1G Ethernet. Also its support by openwrt but I would give RouterOS at least a try.
https://mikrotik.com/product/rb5009ug_s_in
https://openwrt.org/toh/mikrotik/rb5009ug_s_in
Regarding the 10G LAN depending on your needs its may be better of in a DMZ anyway?
If you could relinquish to the 10G LAN port in some way may be the mikrotik rb5009 fits your needs. It has 1x 10G sfp+, 1x 2,5G and the rest are 1G Ethernet. Also its support by openwrt but I would give RouterOS at least a try.
https://mikrotik.com/product/rb5009ug_s_in
https://openwrt.org/toh/mikrotik/rb5009ug_s_in
Regarding the 10G LAN depending on your needs its may be better of in a DMZ anyway?