Hardware for 25 Gbit/s Fiber Internet Connection (Router + Firewall)

[25Gbits]

Hello guys

My Provider Init7 is offering 10 Gbit/s and 25 Gbit/s Fiber Internet Connection now. However, he does not offer good hardware for these internet connections. Currenly, I use the Mikrotik CCR2004 which they sell with the internet connection but it is terrible. The Mikrotik router is slow in routing, extremely loud even at 1 Gbit/s Routing (cannot put it into my living room), non existing switching performance due to no dedicated switching chip.

Now I found OPNsense.

I already have a Ryzen 5950X System with 128 GByte RAM here and a Threadripper Pro with 32 cores and 256 GByte RAM. However, I need both systems for production in a windows environment. Would it be possible / efficient to run OPNsense on the Threadripper in a VM and do the routing and firewall work?

If I wanted to build a dedicated system as a Router and Firewall for the 25 Gbit/s connection that can actually do the 25 Gbit/s Thoughput what kind of hardware would I need? Of course 25 Gbit/s is not my 24/7 traffic but if I need to upload stuff to my 10G servers, I want it to be done fast and / or without blocking the remaining internet bandwidth. Two 10Gbit/s uploads are totally realistic. Hence, the Hardware must be capable of handling 25Gbit/s Throughput. What kind of hardware would I require for a dedicated system that runs OPNsense?

I would connect the PC via a SFP28 NIC directly to the Fiber connector via fiber cable. Then I would connect the Router PC with multiple links to my 10G Switch. If there was a good way to build a 25 Gbit/s Switch into the dedicated Router PC as well, I would welcome that option as well. Otherwise I plan to get a 25 Gbit/s Switch mid term.

Watercooling the System, for instance with an external solution like Mora3, is an option.

[bugacha]

i7-14700
Proxmox
Opnsense 25.1.1
Mellanox ConnectX-4 Lx
1 port passthrough WAN
1 port bridged LAN into opnsense and TrueNAS


speedtest from TrueNAS

Code Select Expand

# bin/speedtest -s 43030

   Speedtest by Ookla

      Server: Init7 AG - Winterthur (id: 43030)
         ISP: Init7
Idle Latency:     1.44 ms   (jitter: 0.08ms, low: 1.42ms, high: 1.70ms)
    Download: 23453.57 Mbps (data used: 23.0 GB)
                  3.30 ms   (jitter: 3.67ms, low: 1.13ms, high: 26.84ms)
      Upload: 22000.78 Mbps (data used: 22.7 GB)
                  1.25 ms   (jitter: 0.11ms, low: 1.08ms, high: 1.94ms)
 Packet Loss:     0.0%

https://www.speedtest.net/result/c/db97cbad-a4d3-4d23-af27-980535ffbe23