So it seems that iOS is having some major issues when it comes to Firewalls / Proxies (just personal opinion) - What I've noticed now is that our iOS devices are much happier on a more "open" network within our internal LAN here at home. I'm going to build a separate wireless LAN for them versus utilizing my existing LAN for my other devices. From what I can tell, they run much faster so long as FW's aren't running on the given access point you are utilizing for said iOS devices. (Not cool and much more prevalent in iOS11, it seems. Hoping iOS11.3 somehow addresses this.)
Here's some wishful thinking on iOS11.3 if you're curious: http://www.redmondpie.com/ios-11.3-beta-1-download-expected-release-date-feature s-more/
With that said, here's my plan for now:
Incoming WAN connection to Gateway (FW Enabled)
LAN1 with my normal security/stand-alone FW also enabled (WiFi/Ethernet Capable) - Devices outside of iOS Devices
LAN2 (WiFi 2.4Ghz / 5Ghz) - Only for iOS Devices (FW disabled on local AP but will still utilize FW at Gateway)
DNS / IP's / Routing obviously at your own desire...
Good luck everyone,
Devin