Most Secure Router?

[sdifox]

So if I go this route, what specific hardware should I use? I've reviewed the hardware requirements. I know Netgate sells their own boxes and I found several options on FirewallHardware.it among other sites. I do plan on running OpenVPN and TOR, as well as packages.

Depends on your pipe. If you have gigabit fiber, you'll want a beefy box.

 

[Bardock]

Tor documentation warns against VPN with Tor. It's not a good idea.

 

[Red Squirrel]

I've ran pfsense on a pentium 3 before, it was a 1U server I got for free. It struggled to go over 5mbps though, so when I got fibre I got another 1U box that is a core2duo and it does fine.

If actually buying hardware, I think I would look at those Netgate boxes myself. Cheaper than a computer system and will use way less power.

Basically almost any old computer with two NICs should be able to handle it, unless it's REALLY old.

 

[sdifox]

I've ran pfsense on a pentium 3 before, it was a 1U server I got for free. It struggled to go over 5mbps though, so when I got fibre I got another 1U box that is a core2duo and it does fine.

If actually buying hardware, I think I would look at those Netgate boxes myself. Cheaper than a computer system and will use way less power.

Basically almost any old computer with two NICs should be able to handle it, unless it's REALLY old.

It gets more cpu intensive when you do encryption and dpi

 

[Engineer]

Depends on your pipe. If you have gigabit fiber, you'll want a beefy box.

Is there even a platform that can pump 1Gbps through OpenVPN at this point? Seems to max out, from what I've read, at 200-300Mbps on pfsense.

 

[sdifox]

Is there even a platform that can pump 1Gbps through OpenVPN at this point? Seems to max out, from what I've read, at 200-300Mbps on pfsense.

Xeon AES-NI helps.

Here is some interesting numbers

https://forum.pfsense.org/index.php?topic=127509.0

 

[mv2devnull]

AES-NI and MTU. You can use jumbos inside the tunnel. That gives the encryption more data to crunch at a time.

 

[Engineer]

Xeon AES-NI helps.

Here is some interesting numbers

https://forum.pfsense.org/index.php?topic=127509.0

I think I've read that previously. It appears that OpenVPN needs to be rewritten to take advantage of the hardware, IIRC. Not even sure that OpenVPN is multithreaded at this point.

 

[sdifox]

I think I've read that previously. It appears that OpenVPN needs to be rewritten to take advantage of the hardware, IIRC. Not even sure that OpenVPN is multithreaded at this point.

Single, but you can multi instance it