Any decent Gigabit routers out there? I know Cisco RV xxx is a disaster; what else's left?

bbiandov

Distinguished
Apr 23, 2009
19
0
18,510
Hi everyone,

Any decent Gigabit routers out there? I know Cisco RV xxx is a disaster; what else's left?

I need IPsec VPN (throughput could be as low as 50M or so) and simple NAT throughput approaching the Gigabit mark.

The RV320-K9-NA appears to be exactly what I want except for the terrible reviews; bad firmware and lower-than-advertised performance.

Does anyone have true (I've used it; not read it on Google) recommendation for a dual interface Gigabit router with IPsec capability?

Thank you
 
Solution
I guess it would depend on which asa since the large ones have 10g interface and nobody would buy them if they would not pass even 1g of traffic.

You have to go back and define what feature is most important. If you notice the ubiquiti device only gives numbers for simple IP forwarding rates. That is running the device like a layer3 switch. Even cheap linksys smart switches can pass traffic at maximum rate as well as every layer 3 switch product from almost every vendor.

They do not state rates when the are running nat. They do not state rates based on the different forms of VPN. This does not mean it is a bad product you just can not compare it to cisco or juiper that do state those numbers.

This is one of those things that...
What you need to look for are firewalls when you want good vpn performance. You will get the router function on most just a part of how they work.

The rv lines of cisco devices is targeted at small business and is intentionally simpler.

Be very careful reading performance numbers. IPSEC throughtput rates are very different if you test 1 large session rather than 100 small ones. Many consumer and small business devices do not give you any details and will test with the one that gives the biggest number even if that is unrealistic.

Cisco sells the ASA line of device which is a much more advanced device. These are enterprise devices and tend to get the number cisco claims. They many time will tell you the rates at worst case...ie lots of sessions with 64byte packets rather than using best case numbers. You can also look at juniper SRX firewalls. Both are used by many large companies and ISP. The lower end devices from both companies are somewhat affordable.

You can find a huge number of firewalls on the market. If you can afford the price I would stay with the larger names because you can easily find other people who use them and many examples of configurations.
 

bbiandov

Distinguished
Apr 23, 2009
19
0
18,510


I currently have Cisco ASA and although it's better than the RV meaning it doesn't just stop working the performance sucks. I am cool with the reliability of the ASA but on a Gigabit Internet connection it just doesn't cut it.

I've seen many recommendations for Ubiquiti Edge Router devices. Any feedback here?

 
I guess it would depend on which asa since the large ones have 10g interface and nobody would buy them if they would not pass even 1g of traffic.

You have to go back and define what feature is most important. If you notice the ubiquiti device only gives numbers for simple IP forwarding rates. That is running the device like a layer3 switch. Even cheap linksys smart switches can pass traffic at maximum rate as well as every layer 3 switch product from almost every vendor.

They do not state rates when the are running nat. They do not state rates based on the different forms of VPN. This does not mean it is a bad product you just can not compare it to cisco or juiper that do state those numbers.

This is one of those things that only you can really select the product since only you know your traffic pattern. It is easy when you have 10 devices and all you are running is nat. It is completely different when you have 1000 devices and have vpn and content filters running.

This is the reason that vendors must state the rates their products run with different traffic loads.
 
Solution