The ongoing Firewall Saga! (2nd Post has status)

Zend won't work on a Pi, so that means option 1 is right out.

Looks like that's your only option. If you want to spend some time whiteboarding up some concepts, throw it in a google doc and I'll see if I can poke holes in it!

--Rob