High-performance router compatible with gigabit ISP and security solutions
High-performance router compatible with gigabit ISP and security solutions
Looking for a better router to handle the new gigabit speed. I own an Ubiquiti Pro, but it slows down to about 300mbps when intrusion detection is active. There are more powerful models available, though they cost around $2500. Do you have any recommendations? Maybe moving the intrusion detection to another server could help?
Most home routers lack IDS/IPS capabilities, meaning you're essentially buying a basic setup. You'll have to spend significantly more for devices capable of gigabit speeds with advanced security. For instance, the entry-level Meraki MX65 costs around $850, plus an additional $565 for a one-year Advanced Security license—saving roughly half the price if you opt for an Enterprise version, though it lacks full IPS functionality. This brings the total near $1400, while the MX65 offers only 200 Mbps with all security features active. Consider another example: The FortiGate 90E is a premium home firewall priced about $2200, delivering up to 270 Mbps when all security features are enabled. If you limit it to IPS alone and disable other functions, it can reach 450 Mbps. Removing NGFW capabilities and using it as a traditional ACL firewall allows it to go up to 4Gbps. Therefore, the $2500 router you find appears reasonably priced. EDIT: The entry-level FortiGate NGFW suitable for gigabit networks is the FortiGate 200E, starting at $5500.
A Gigabit router can definitely deliver that performance. However, I think you're referring to Wi-Fi speed here. You'd need at least 802.11ac to reach that level. There are plenty of consumer options available that support it. Are you asking about the current setup? (It seems you're hinting at a maximum speed.) The link you shared points to a specific model from Ubiquiti. If not, then yes—this is essentially what you need. AC.
It seems he's referring to advanced firewall capabilities such as intrusion detection and prevention systems. These are functionalities typically found in specialized routers rather than standard devices. I've included some key specifications and costs to illustrate the scale involved.
We're currently working on a firewall replacement project, so I've got these points in mind. (Keep in mind we're dealing with a top-of-the-line device...) Make sure to check the specifications for the server—processing power and RAM are crucial to achieve the desired performance.
I believe it would be more economical to purchase another USG and distribute the traffic. What are your thoughts on that? I could simply use router 0 for VLAN 0 and forward the rest of the traffic unchecked to the second router. That would allow me to reach around 700, which is within my capabilities. I think this approach would be effective and I could hire another pro for $250.
As long as it allows for even distribution of traffic, that's fine—unless you plan to handle the balancing yourself, which could also be effective. I'm not sure if this would be ideal, but it might work in a pinch.
Use VLAN tags and route VLAN 1 directly from router 0 without filtering. That way, router 0 handles only traffic on VLAN 0 and forwards everything else.