Personally I wouldn’t want to virtualize pfSense. It needs to be it’s own piece of hardware so it isn’t affected if you need to take the main server down.

As little as possible. Almost everything in my NAS is hardware from other systems that I’ve upgraded.

UnRAID is great in that you can start off small and grow at your own speed.