Linus prefers IPSec over OpenVPN for networking reasons.
Linus prefers IPSec over OpenVPN for networking reasons.
Really, it would make a big difference if OpenVPN could handle multiple threads at once.
They usually overcharge most of it, take a look at the ISR4k—list price around $3.3k for the 4331, and out of the box it only offers 100 Mbps with an extra costly license to raise it to 300. Most businesses can secure about half off, but you're mainly paying for the brand name and IOS. You could get a few extra gigabytes for a couple hundred bucks on the Mikrotik model like the RB4011iGS+RM or similar, depending on your needs.
We rely heavily on Mikrotik for customer circuits and as CPE; they are excellent devices. I understand you're investing in their brand, but Cisco has a solid history and the CCNA is a recognized networking standard. For daily use of customer CPE, I'd prefer a Routerboard, though for critical high-availability equipment I'd still choose Cisco. If Mikrotik continues improving as it has before, I wouldn't be surprised by future changes. I’ll note this is qualified since I’m certified in both Cisco and Mikrotik gear and also serve as a trainer for both.
No but i have pfsense so i can see how much of a hog snort is in terms of CPU. And i only have a 100/10 internet which is far from what a business have... There is no reason to strain the router with VPN when you can do it more cheaper on a separate machine.
It seems like you're wondering about the practicality of something for personal use, especially since your current setup is already functional. It might not add much value unless it solves a specific need.
I don't agree. Having the VPN on the router makes it part of the main routing table, which increases flexibility. Why install another device that uses power, needs setup, and relies on Ethernet ports when you don't? It's simpler to manage all network settings on one unit. I'd also keep WiFi enabled if pfSense's support was decent. Running a VPN server directly on the router is even better—it gives full LAN access without altering the routing table on the VPN device, which already handles the default route.