This is (slightly) off topic because I am after advice for hardware to run pfsense/opnsense router/firewall software (which is BSD based, not linux) but I hope you will forgive me.

I have been running openvpn on a SOHO router for a while now (so that all my internet traffic goes over a VPN tunnel to one of several VMs I have dotted about). That has worked fine and I saw little in the way of speed degradation over my ADSL line (I got around 8-10 Megabits/s over the tunnel when my ADSL speed was around 11-12), But I have recently upgraded my broadband to FTTC and get around 30 Megabits/s over the WAN. However, my openvpn tunnel speed has stayed at the 8-10 mark. Not good. At first I thought that the problem lay with openvpn itself, but of course I then twigged that my router was probably the culprit because it can't hanndle the encryption load. Sure enough, testing connections to my VPN endpoints whilst running openvpn directly from my i7 desktop showed that I could get the full 30 Meg.

So I now need to ditch the router and get something a bit beefier. I would also like to run another firewall between my two internal Lans - hence the interest in opnsense or pfsense (though additionally I am open to recommendations for alternative F/W software so long as it includes openvpn capability).

I could simply re-purpose an old desktop (I have a couple lying around, including an old i5 with 8 gig of RAM) but that strikes ma as too much of a power hog when something much smalller would probably do.

So - does anyone out there have any recommendations? The CPU must have AES-NI to help with the crypto load (that is probably what is killing my current router setup), but I don't need much in the way of storage so some small fanless device would probably do fine.

Cheers

Mick

--------------------------------------------------------------------- Mick Morgan gpg fingerprint: FC23 3338 F664 5E66 876B 72C0 0A1F E60B 5BAD D312 https://baldric.net/about-trivia ---------------------------------------------------------------------