Even Suricata, if you have a non-PPPoE network, is fantastic and built into OPNsense. The pro version is free with telemetry, and even the regular free version is pretty great.