The NUC isn't the router, it runs the Hive witness (and another blockchain) behind a different public IP.

The G30b as pictured on the blue rack has 4 NICs which is more than enough, though I have seen pfSense router working on a NUC with single NIC using the same switch as I'm using to tag the required VLANs.