I virtualize mine with proxmox and pass the necessary NICs through to the VM. Snapshots make rollbacks a breeze. You can also run HA pairs if you want to do updates without downtime.