+1 for Mikrotik.
Get one of their routers that have an Arm or x86 processor and you can run PiHole and a DDNS updater on there as containers. Wireguard support (client and server) is built in.
Even their cheapest hardware that runs routerOS has access to all the same features as their enterprise level gear.
Pretty sure Rockstar allows community servers to disable the anti-cheat as well, just like single player.
The GTA RP community at this point is a considerable part of why people are still playing GTA.