Unsolved 10G Edge Router/Firewall
-
Still putting together a new network. I'm now looking for a sub 10k router/firewall that's capable of handling a 10G WAN link. It should also be capable of handling an IPSec site to site tunnel with 1Gb/s at least (encryption/decryption in hardware).
Looked through Ubiquities offerings, but couldn't find an EdgeRouter Pro with a 10GBaseT or SFP+ port. There are lots of users asking for such a router in the UBNT forums, but it's still to be announced AFAIK. One option is pfSense's pre-built XG1541 3.5k EUR appliance, which should be able to run an IPsec tunnel at 2 Gb/s (see here, here and here).
Is there anything you can recommend?
-
@thwr Build your own with VyOS
-
@brianlittlejohn said in 10G Edge Router/Firewall:
@thwr Build your own with VyOS
I've been using pfSense for more than a decade now and it served me very well. I would need a very good reason to switch to VyOS if going the DIY route
-
@brianlittlejohn I'll second the build your own. A used 1u server from xByte with VyOS. I don't think anything else will come close to that price point. I know the NTG lab was running on a Supermicro and 40gb NIC cards on VyOS, but don't remember the other specs on it.
-
@travisdh1 said in 10G Edge Router/Firewall:
@brianlittlejohn I'll second the build your own. A used 1u server from xByte with VyOS. I don't think anything else will come close to that price point. I know the NTG lab was running on a Supermicro and 40gb NIC cards on VyOS, but don't remember the other specs on it.
I'm forgetting your across the pond today, and I'm not remembering the quality aftermarket vendors in Europe
-
Well, I could go for DIY, but I'm a little bit concerned about the VPN throughput. I think I would need some sort of crypto acceleration, either as a CPU/GPU feature or some other external crypto hardware.
My point about buying an appliance: One throat to choke.
-
https://routerboard.com/CCR1072-1G-8Splus 3050 USD
https://routerboard.com/CCR1036-8G-2SplusEM 1295 USD -
@thwr said in 10G Edge Router/Firewall:
Well, I could go for DIY, but I'm a little bit concerned about the VPN throughput. I think I would need some sort of crypto acceleration, either as a CPU/GPU feature or some other external crypto hardware.
My point about buying an appliance: One throat to choke.
Always a valid point. Just be sure to get the sales minions to document that it will meet that 1GB/s VPN performance.
-
@travisdh1 said in 10G Edge Router/Firewall:
@travisdh1 said in 10G Edge Router/Firewall:
@brianlittlejohn I'll second the build your own. A used 1u server from xByte with VyOS. I don't think anything else will come close to that price point. I know the NTG lab was running on a Supermicro and 40gb NIC cards on VyOS, but don't remember the other specs on it.
I'm forgetting your across the pond today, and I'm not remembering the quality aftermarket vendors in Europe
Usually good. We struggled a bit with black death here a bit ago, but it's getting better since we got running water and power right out of the wall outlet
You do know that the world's largest internet exchange is in Frankfurt? 
-
@thwr said in 10G Edge Router/Firewall:
@travisdh1 said in 10G Edge Router/Firewall:
@travisdh1 said in 10G Edge Router/Firewall:
@brianlittlejohn I'll second the build your own. A used 1u server from xByte with VyOS. I don't think anything else will come close to that price point. I know the NTG lab was running on a Supermicro and 40gb NIC cards on VyOS, but don't remember the other specs on it.
I'm forgetting your across the pond today, and I'm not remembering the quality aftermarket vendors in Europe
Usually good. We struggled a bit with black death here a bit ago, but it's getting better since we got running water and power right out of the wall outlet
You do know that the world's largest internet exchange is in Frankfurt? Man sad to hear about the black death.
-
@triple9 said in 10G Edge Router/Firewall:
https://routerboard.com/CCR1072-1G-8Splus 3050 USD
https://routerboard.com/CCR1036-8G-2SplusEM 1295 USDThanks. Isn't that Mikrotik hardware?
-
@thwr said in 10G Edge Router/Firewall:
@travisdh1 said in 10G Edge Router/Firewall:
@travisdh1 said in 10G Edge Router/Firewall:
@brianlittlejohn I'll second the build your own. A used 1u server from xByte with VyOS. I don't think anything else will come close to that price point. I know the NTG lab was running on a Supermicro and 40gb NIC cards on VyOS, but don't remember the other specs on it.
I'm forgetting your across the pond today, and I'm not remembering the quality aftermarket vendors in Europe
Usually good. We struggled a bit with black death here a bit ago, but it's getting better since we got running water and power right out of the wall outlet
You do know that the world's largest internet exchange is in Frankfurt? You have to be one spoiled network nerd, lucky dog!
-
@thwr said in 10G Edge Router/Firewall:
@triple9 said in 10G Edge Router/Firewall:
https://routerboard.com/CCR1072-1G-8Splus 3050 USD
https://routerboard.com/CCR1036-8G-2SplusEM 1295 USDThanks. Isn't that Mikrotik hardware?
yes, Routerboard if their hw brand, as RouterOS is for software
-
@triple9 said in 10G Edge Router/Firewall:
@thwr said in 10G Edge Router/Firewall:
@triple9 said in 10G Edge Router/Firewall:
https://routerboard.com/CCR1072-1G-8Splus 3050 USD
https://routerboard.com/CCR1036-8G-2SplusEM 1295 USDThanks. Isn't that Mikrotik hardware?
yes, Routerboard if their hw brand, as RouterOS is for software
Heard some bad things about it. Will take another look, thanks again
-
@thwr said in 10G Edge Router/Firewall:
@triple9 said in 10G Edge Router/Firewall:
@thwr said in 10G Edge Router/Firewall:
@triple9 said in 10G Edge Router/Firewall:
https://routerboard.com/CCR1072-1G-8Splus 3050 USD
https://routerboard.com/CCR1036-8G-2SplusEM 1295 USDThanks. Isn't that Mikrotik hardware?
yes, Routerboard if their hw brand, as RouterOS is for software
Heard some bad things about it. Will take another look, thanks again
like what?
-
@triple9 said in 10G Edge Router/Firewall:
@thwr said in 10G Edge Router/Firewall:
@triple9 said in 10G Edge Router/Firewall:
@thwr said in 10G Edge Router/Firewall:
@triple9 said in 10G Edge Router/Firewall:
https://routerboard.com/CCR1072-1G-8Splus 3050 USD
https://routerboard.com/CCR1036-8G-2SplusEM 1295 USDThanks. Isn't that Mikrotik hardware?
yes, Routerboard if their hw brand, as RouterOS is for software
Heard some bad things about it. Will take another look, thanks again
like what?
like poor software, bugs, failing hardware and what not
-
@thwr said in 10G Edge Router/Firewall:
@triple9 said in 10G Edge Router/Firewall:
@thwr said in 10G Edge Router/Firewall:
@triple9 said in 10G Edge Router/Firewall:
@thwr said in 10G Edge Router/Firewall:
@triple9 said in 10G Edge Router/Firewall:
https://routerboard.com/CCR1072-1G-8Splus 3050 USD
https://routerboard.com/CCR1036-8G-2SplusEM 1295 USDThanks. Isn't that Mikrotik hardware?
yes, Routerboard if their hw brand, as RouterOS is for software
Heard some bad things about it. Will take another look, thanks again
like what?
like poor software, bugs, failing hardware and what not
for these particular models or in general? I use routerboards a lot (from smallest up to CCR1009) and it never failed. I don't know for 1036 and 1072.
-
@triple9 said in 10G Edge Router/Firewall:
@thwr said in 10G Edge Router/Firewall:
@triple9 said in 10G Edge Router/Firewall:
@thwr said in 10G Edge Router/Firewall:
@triple9 said in 10G Edge Router/Firewall:
@thwr said in 10G Edge Router/Firewall:
@triple9 said in 10G Edge Router/Firewall:
https://routerboard.com/CCR1072-1G-8Splus 3050 USD
https://routerboard.com/CCR1036-8G-2SplusEM 1295 USDThanks. Isn't that Mikrotik hardware?
yes, Routerboard if their hw brand, as RouterOS is for software
Heard some bad things about it. Will take another look, thanks again
like what?
like poor software, bugs, failing hardware and what not
for these particular models or in general? I use routerboards a lot (from smallest up to CCR1009) and it never failed. I don't know for 1036 and 1072.
I don't know a specific model right now, just rumors I've heard here and there
