Thinkg on moving to FTTP - Need advise on a router.

Hello,
I can now get FTTP @ 900 Mbps. My current opnSense server won't cope with these speeds so I'm looking at my options.

Can anyone recommend a router capable of doing the following:
1 x IPsec VPN
1 x openVPN

The ability to allocate users which VPN to use. ie. Only allow one device to use the IPsec, but set multiple devices to use the openVPN as there default gateway.

I know this can all be done using openSence, but what hardware would be needed to support 1Gbps + speeds when connecting using PPPOE ?

Thanks

Hi. Has anyone got any ideas on this?

I'm thinking a N100 mini pc with 16GB ram and 128 GB SSD running Opnsense.
I'm just trying to make sure it will run ok at 900Mbps using PPPOE.

thanks

How many VPN users? Seems a pretty reasonable spec for a small number of concurrent users.

Thanks for the reply.

I currently run opnsense with my 80/20 FTTC and have no issues with it.

It's configured with an IPsec VPN that routes to my office and only one device connects via this.
The openVPN ( or wire guard) is used my all our homes wireless devices routing out via a 3rd party provider.

On the mini server I currently use I've never seen CPU usage go above 15%, but I know it wont cope with PPPOE at 900Mbps, which is why I'm looking for a replacement.

I think of buying a bare bones server and buying the memory and SSD locally.
This is what I'm considering: https://www.aliexpress.com/item/1005004360072281.html

Thanks

There's a couple of well known OPNsense users on here - maybe change your OP title to attract a bit more specific attention.

I run OPNsense on a Qotom with an i7 processor for my Gigaclear 1Gbps service. It works fine. I have a permanent VPN connection to another site where I have an FTTC service.

In reply to a post by zMaliz:

On the mini server I currently use I've never seen CPU usage go above 15%, but I know it wont cope with PPPOE at 900Mbps, which is why I'm looking for a replacement.

What's the spec of the current mini server?

Routing at 1Gbps shouldn't be a problem for anything made in the last decade, neither is PPPoE, but it's the encryption that might bite you.

Your various types of VPNs *might* be able to use hardware-accelerated encryption, either AESNI instructions in the CPU or other hardware acceleration provided by the server, but as for *exactly* what acceleration works with OPNsense you're probably best off asking on an OPNsense forum. I wouldn't want to recommend that you buy that N100 server only to find it didn't perform.

Equally though, I'd suggest you try your existing server on FTTP - you might be surprised how well it *does* perform. You can't simply scale up 15% CPU x 900/80 to get a valid estimate of performance. Maybe you don't need to buy anything at all.

Doesn't look like I can change the title of my original post.

The current server has 8GB ram and 128GB SSD with a AMD GA420CA CPU.
From what I've read, as PPPOE only uses a single this won't cope.

Thanks

What are you going to lose if you hold off buying any new kit until you've tried your existing kit to see if it does work? Best case you might save a few bob or worst case you might have a couple of days when your new connection is not running at full speed.