If you could relinquish to the 10G LAN port in some way may be the mikrotik rb5009 fits your needs. It has 1x 10G sfp+, 1x 2,5G and the rest are 1G Ethernet. Also its support by openwrt but I would give RouterOS at least a try.

https://mikrotik.com/product/rb5009ug_s_in

https://openwrt.org/toh/mikrotik/rb5009ug_s_in

Regarding the 10G LAN depending on your needs its may be better of in a DMZ anyway?