bang for a buck is still Mikrotik RB260GS POE switch... it can be controlled with OpenWrt remotely because it has API.... so maybe that will work best, just have one OpenWrt device connected to it and you can control it.