Why do you think you need a firewall.
Almost every consumer router already prevent any access to your internal machines. The simple NAT function every router runs is too stupid to know which machine inside your network to send traffic from a unknown machine on the internet.
Most other abilities that you used to see on firewalls is long dead. There is no longer any ability to filter content by so called "deep packet inspection" . All data is encrypted by HTTPS so just like the bad guys your firewall can't see what is really going on. Even trying to track via ip address is not very useful since many sites now run in shared cloud based data centers. Many ip addresses just map back to cloudflare or google.
Pretty much you only need a firewall if you run some kind of server on the internet. Most people run these on cloud providers and use the providers firewalls.
So any recommendation is going to depend on exactly what you are planning on doing.