The TTB service ends at the NTE. They have offered to sell / rent me the following equipment:
Cisco ISR4331 Router
Cisco 891F Router
Obviously they are hugely expensive so first question for members is - can anyone suggest something else, or would you stick with one of the above?
Ultimately, it depends on who is going to be building and supporting your network.
For a fraction of the cost of the above items, a Mikrotik RB4011 or RB5009 will wipe the floor with them performance wise (and you can buy a second as a spare). However, are you able to configure one? TTB won't do this for you, but they might supply the Cisco routers pre-configured.
Those models only have one SFP(+) port, meaning one fibre connection. Have you yet found out whether the connection that you make into the NTE will be presented as copper or fibre?
If you need multiple fibre connections to multiple buildings, something like the CCR2004-1G-12S+2XS has a ton of fibre ports. Since it's a router, you can give different subnets to each building (a good way to scale your network), apply ACLs between the subnets, etc.
What I wondered was - do we have the service into the "Gatehouse" and then extend the LAN into the manor via the new fibre we connected, or would it be more beneficial to "patch" the NTE fibre into "Manor House" plant room where we would have the TTB Router (or another type) then "backfeed" the connection down two of the other cores back to the "Gatehouse" where less of a demand and service requirement is needed?
It's a shame that you don't have SMF between the manor house and manor house plant room, because then you could simply patch the fibres together passively.
As an overarching principle: you want to bring all the fibres from the different buildings into one location(*) and fan out from there. Are other buildings likely to be fibred up to the manor house plant room, or to the gatehouse?
Putting the router next to the NTE would be simplest - both on a UPS of course. You could then fan out all the connections from there.
However, to serve the manor house you'd need to install a switch in the plant room to connect the SMF to the MMF. (Or if it's ducted, you pull another SMF cable).
Putting the router the Manor house plant room makes no difference from a performance point of view. But it would allow you to use the MMF to the manor house and SMF to the gatehouse (in different router ports). If there are other buildings that have fibre connections back to the manor house plant room, that would also be a logical location.
As you say, to provide Internet access to the gatehouse itself will involve using another pair back to the gatehouse, but that's no big deal. The gatehouse will need a switch with one fibre port. Even the tiny Mikrotik hEX PoE will do the job (it's a router but can be configured as a switch, and has 4 PoE ports for connecting access points). For more ports there are the CRS switches, or things like Netgear GS110TP.
For reference: at home I use the RB4011, hEX PoE and GS110TP. I've not used the CRS switches. The RB5009 is newer than the RB4011, but the RB5009 can *only* run RouterOS v7 (the RB4011 can run v6 or v7). v7 has had a chequered history, but should be stable enough now.
(*) However it's fine to patch fibres together: with no active equipment in the path, that counts as a direct connection.