For a 500Mbps VPN switch or router, use suitable hardware with a robust CPU.
For a 500Mbps VPN switch or router, use suitable hardware with a robust CPU.
Hello, I’m looking to purchase a mini PC router/switch equipped with PFSSL software. I currently have a 600Mbps Ethernet connection and want a device capable of handling at least 500Mbps VPN traffic for two or more computers. Are there any affordable setups using compact, fanless boxes available online that meet these requirements?
A 500Mbps VPN demands significant computing resources. That’s why high-performance devices come at a higher price. Skip the inexpensive, compact models with no fans. If speed isn’t critical, you can run a basic or entry-level machine like an i3 ITX with a multiport NIC to handle your routing needs. For reference on affordable options, check this link: https://www.amazon.com/Performance-500Mb...9PV5F?th=1
It seems you're asking about using hardware to handle IPsec instead of setting up OpenVPN. If your goal isn't clear, just let me know. Otherwise, you might want to confirm your needs before proceeding.
I question reaching 600mb of VPN speed. It seems unlikely it would exceed 1 Gb of regular traffic. Usually, these devices route each port straight to the CPU, meaning all functions depend on the processor with no hardware assistance. The extra cost in premium models comes from specialized hardware for networking tasks. This setup lets the CPU delegate specific jobs to the hardware while concentrating on other operations, thus boosting performance.
You'd need a significantly stronger solution. Simply sending 60Mbit doesn't meet expectations. OpenVPN consumes up to 30% CPU on my i5 3470T at 3.5Ghz, rising to 36% at 1.6Ghz—still faster than an Atom core. IPsec could be better, but there are doubts about its security. OpenVPN operates with a single core per client, which may become a bottleneck on a slower Atom, causing it to overuse more cores without improving performance.
He managed to achieve around 260Mbps using pfSense on an Intel 3865U processor, which suggests it's feasible rather than a hardware limitation. I'm more keen on replicating this setup or creating custom components because I prefer open-source solutions.