Im using 10gb network cards in my homelab. My vm server has an extra 1gb port for an outside interface on multiple pfsesne vms that i use to route traffic over vpn tunnels.
Then on my nas i have 10gb to a switch with the vm servers. It has another 1gb interface that i run directly to another nas. It uses that direct link to backup data nightly.
I use a vps running openvps. Then i only allow ssh access from my vpn ip address.