Looking at buying a new hardware and moving to Opnsense (I am currently running Untangle).
It looks like an N100 is the right price/performance at the moment - but I need to get 1Gb PPPoE line performance (this is how my internet circle is delivered).
All the new hardware (have been looking at CWWK/HUNSN from ali or amazon) seems to come with i226 which seems to still have some issues? Would I be ok with this hardware?
A Deciso DEC650 and successors will deliver 1 Gbit/s with PPPoE. That's all I have actually measured, sorry, no idea about the N100.
Since even the previous generations of N5105 and J4125 suffice in routing 1 GBit/s, the N100 should be able to do that as well. Zenarmor or VPN is another story, though.
Quote from: meyergru on February 13, 2024, 08:15:36 AM
Since even the previous generations of N5105 and J4125 suffice in routing 1 GBit/s, the N100 should be able to do that as well.
Routing =/= PPPoE ;)
I implied with PPPoE, as I use all of these devices with PPPoE.
Quote from: meyergru on February 13, 2024, 09:22:28 AM
I implied with PPPoE, as I use all of these devices with PPPoE.
Good to know, thanks!
Noticed any additional latency with pppoe on opnsense on this kind of hardware due to PPPoE (either bare metal or virtualized) when compared with a typical ISP router (or even a microtik or similar) ?
I have 4ms ping time with a N6005 using an external ONT, so no.
Quote from: meyergru on February 13, 2024, 08:15:36 AM
Since even the previous generations of N5105 and J4125 suffice in routing 1 GBit/s, the N100 should be able to do that as well. Zenarmor or VPN is another story, though.
Thank you for this first hand data -- Interested in Zenarmor, less concerned about VPN processing. Is this far off from being able to do 1Gb with PPPoE with these? Or where would I need to go hardware wise?
Quote from: Jabes on February 12, 2024, 11:49:52 PM
Looking at buying a new hardware and moving to Opnsense (I am currently running Untangle).
It looks like an N100 is the right price/performance at the moment - but I need to get 1Gb PPPoE line performance (this is how my internet circle is delivered).
All the new hardware (have been looking at CWWK/HUNSN from ali or amazon) seems to come with i226 which seems to still have some issues? Would I be ok with this hardware?
I can't speak to PPPoE as I don't use it, but i225/i226 is hit or miss. I've posted a thread to try and isolate the variable since some people have zero problems and others have a lot. I'm currently using i225 with no issues.
Quote from: Jabes on February 13, 2024, 01:08:31 PM
Quote from: meyergru on February 13, 2024, 08:15:36 AM
Since even the previous generations of N5105 and J4125 suffice in routing 1 GBit/s, the N100 should be able to do that as well. Zenarmor or VPN is another story, though.
Thank you for this first hand data -- Interested in Zenarmor, less concerned about VPN processing. Is this far off from being able to do 1Gb with PPPoE with these? Or where would I need to go hardware wise?
I do not use zenarmor, so I cannot really tell other than in order to inspect encrypted traffic, it has to be decrypted and encrypted again, so I assume CPU overhead comparable to encryption over a VPN.
Maybe you should ask Zenarmor folks on what CPU they recommend for your requirements.