For home use, it can do everything as long as you have the ram to match it. I’m not going to lie, I’m a huge fanboi of the i310100 for routing. The i3 is solid, encryption causing the cpu to roll along at 40%. But interesting the C3758 is nearly maxed out (cpu usage at 94%) when it’s on the download side. Now I get close to 900 mbps in both directions.

Turns out the solution was, as you suggested, setting Crypto Hardware as: AES-NI CPU-based acceleration.

Equivalently configured, the Protectli is $150 less ($546 vs $699), and its CPU is nearly twice the power ( vs … For example, compare the Protectli FW6C (CPU: I5 7200U) vs Netgate SG-5100 (CPU: Atom C3558). Still trying to figure out how to maximize ipsec throughput, and it seems that perhaps Protectli hardware is a better bet than Netgate. My question concerns the best physical way to lay out this logical configuration.Protectli vs Netgate hardware Networking & Firewalls I'd like to dedicate a port to each VLAN as well as dedicate one port to connecting back to the UDM for supporting the Wi-Fi side of the world (I have the UDM and two UniFi APs that I intend to keep using for Wi-Fi access). The FW6D has 6 ports (WAN, LAN, OPT 1 - 4).

I've got 4 VLANs currently (management, private/safe, IoT/dangerous crap, and guest). I'm intending to cut over all the hard-wired and routing duties to the new Protectli router running PFSense, but keep the UniFi gear for the Wi-Fi side of things. There are too many traffic hiccups when going thru the UDM that don't exist when direct-connected to my ISP's cable modem.

For the last 18 months or so I've been using a UniFi UDM and it's just not quite up to the task of all the real-time streaming work & video conferencing I need to do. I just got a new Protectli FW6D router to use for my home business.

Protectli fw6d