dnsmasq

Then Kalkin's SRouter, which advertises turning any system distribution into a full router with no dependencies beyond nftables and systemd itself.

RGregor has a Debian 12 router playbook with nftables, AdGuard Home, systemd-networkd, DNSMASQ, and ntopng.

And then the more ambitious ones, imsou's Routerd is a declarative control plane where you describe the router in typed YAML resources instead of scattering your intent across Netplan, systemd-networkd, DNSMASQ, nftables, and systl, which is the thing that makes hand-built routers unmaintainable.

And macenchilla's NetFirewall drives nftables, DHCP, WireGuard, dual WAN failover, CoS, and policy routing from one database, one daemon, one web UI.

So the compound noun he wants exists as six different partial implementations.