Upgrade or update my too-slow-VPN router

I have a FritzBox 7490, it has a well problem, a slow processor which means it can't do VPN at a half decent speed. I actually have three or four FritzBoxes with site-to-site VPNs running between them for backups and file access. I'm lucky to get 3 to 5 Mbps between sites, even on a 20Mbps FTTC upload connection. We're doing off-site backups of large files and they take too long.

I could buy a faster better router. Which? It has to be able to do fast VPN! Also, I like the FritzBox as it has gigabit LAN, WiFi, DECT and VoIP phone all in the one box. But this will cost a few hundred quid per site so a bit of a cost.

Or I could buy a Ubiquiti ER-X EdgeRouter X or four for less than £50 each. Then I need to learn how to do static routes and have it handle the VPN. Will it have a decent VPN throughput, maybe even future proof for FTTP?

Or suggest another cunning plan for me to consider

[No extra points for noting I've been moaning about this for ages, things have now got to the stage I need the VPN speed!]

I am starting to like the Ubiquiti series ...

If you go for their Edge router, then get a Dream Machine Pro for the FTTP (when it arrives) and it will interface nicely on a PPPoE direct to the ONT with IPv4 & v6.

Add in a couple of their WAPs and easy to manage from a single window!

In reply to a post by MHC:

Dream Machine Pro

I'm finding the Ubiquity range confusing. Some of it seems to be designed for you to run a wifi based ISP business. My gaff ain't big enough or hard enough to need more than one wifi transmitter!

Also, if/when FTTP turns up, the ONT is the 'modem', I can connect any router to that, can't I?

I was advised it would not be ideal and the DM-Pro was the way to go. And slowly getting to understand the various capabilities.

In reply to a post by MHC:

slowly getting to understand the various capabilities.

I'll call your bluff! What's the difference between the UniFi routers and the Edge routers? When confronted by too much choice in the jam section I end up buying marmite. Unless there's a Vegemite choice, then I get green marmalade.

In reply to a post by Woolwich:

[No extra points for noting I've been moaning about this for ages, things have now got to the stage I need the VPN speed!]

How much VPN grunt you need?

The reasonably newish CCR 2000-series MikroTik’ers with the fandangly AL32400 (ARM 64-bit cpu clocked @ 1700 MHz) system on a chip, specifically the 2004 will shift 3.4 Gbps though a single IPsec tunnel.

Definitely future proof. Might be a touch overkill at £330 odd though 😀

In reply to a post by Pheasant:

Definitely future proof. Might be a touch overkill at £330 odd though 😀

Trouble is you need one at each end. I have four ends. Then I'm going to have to get a Very Fat leased line. Times four. But any VPN that'll do 80Mbps (as fast as our current fastest download) would do for a while.

The Cloud Core Routers are serious bits of tin, and the CCR2004 is the daddy when it comes to VPN performance. You probably don’t really need that level of grunt to be fair (or the 25G interface options!). They have more modest kit, but the bang for the buck really is quite astounding.

I did say I am getting use to it ...


And if te green marmalade is too expensive, do you buy honey, or some strawberries and sugar?

In reply to a post by Pheasant:

The Cloud Core Routers are serious bits of tin, and the CCR2004 is the daddy when it comes to VPN performance. You probably don’t really need that level of grunt to be fair (or the 25G interface options!). They have more modest kit, but the bang for the buck really is quite astounding.

The RB4100 can do a fair bit as well, also the routerOS learning curve is a bit steep if you are new to the platform.

If you want cheap and Cheerful the HAP Ac2 can do a few hundred Mbit of IPSEC VPN.

Edited by dragon2611 (Wed 30-Jun-21 09:50:47)