A pre-built mini-firewall that runs pfSense out of the box. Easy to configure and works perfectly for small to mid-sized libraries. Allows you to set different filtering configurations and captive portals/landing pages for multiple connections (Wireless, LAN, Child, etc.)
Check out the pfSense website.
You can build your own or buy a Netgate firewall here, starting at $179.