I think I misunderstood what exactly you wanted. I don't think you're getting remote GPU passthrough to virtual machines over ROCE without an absolute fuckton of custom work. The only people who can probably do this are Google or Microsoft. And they probably just use proprietary Nvidia implementations.
ramielrowe
I believe what you're looking for is ROCE: https://en.wikipedia.org/wiki/RDMA_over_Converged_Ethernet
But, I don't know if there's any FOSS/libre/etc hardware for it.
I've heard good things about used/refurb HP (elite desk and pro desk) and Lenovo (m700 and m900) mini-pcs. A quick search shows they're going for ~120-140$ for a quad core with 16 gigs of memory.
Check out minisforum, for example this intel mini-pc. They have a ton of selection, not just that one example.
From the article, "These systems range from ground-based lasers that can blind optical sensors on satellites to devices that can jam signals or conduct cyberattacks to hack into adversary satellite systems."
Recently LTT built a $100k PC desk for a Minecraft streamer. Sometimes the over the top engineering/materials (and thus cost) around something is the entire point. If they gave it a fair shake, and still called it a bad product, and then returned it. There wouldn't be an issue. It being a bad product isn't the issue.
In the LastPass case, I believe it was a native Plex install with a remote code execution vulnerability. But still, even in a Linux container environment, I would not trust them for security isolation. Ultimately, they all share the same kernel. One misconfiguration on the container or an errant privilege escalation exploit and you're in.
You are not being overly cautious. You should absolutely practice isolation. The LastPass hack happened because one of their engineers had a vulnerable Plex server hosted from his work machine. Honestly, next iteration of my home network is going to probably have 4 segments. Home/Users, IOT, Lab, and Work.
Keep in mind, RAID is fault tolerant, not fault proof. For critical data, keep in mind the 3-2-1 rule. Stored in 3 locations, 2 separate mediums, 1 offsite.
First, let's assume we're all intelligent people here and not be condescending.
I am not saying it's not possible to view high resolution content at 25 mbps. I am saying that certain content just can't encode at full fidelity at 25 mbps. In my experience, high action scenes with tons of entropy to encode do not compress well. And those scenes degrade and become muddy or pixelated at lower bitrates. Do you need it for the entire stream? No. But sadly, to save on bandwidth many streaming services also severely limit how much buffering their clients will do.
Even all this said. We're talking about 10's of megabits of difference. Significant portions of the world have managed to offer gigabit internet to practically everyone in their jurisdiction. And yet, we're here in the dark ages with 25/3. And sure, you could say "American has significantly more rural areas, those customers are hard to serve." But, I've got family in coal-country West Virginia that have gigabit fiber. There are no technical hurdles. These companies just don't want to upgrade their infrastructure.
I do not buy this RCE in Apex/EAC rumor. This wouldn't be the first time "pro" gamers got caught with cheats. And, I wouldn't put it past the cheat developers to not only include trojan-like remote-control into their cheats, but use it to advertise their product during a streamed tournament. All press is good press. And honestly, they'd probably want people thinking it was a vulnerability in Apex/EAC rather than a trojan included with their cheat.