Can the C3000 processors with pretty poor single core speed saturate the 2.5 gb WAN to LAN with a handful of firewall rules?
I recently purchased one of these:
Q20331g9 4* Sfp+ 10gbe Ports 5 Intel 2.5gbe Lan Multifunctional Computer Vms Nas Home Server Pfsense Opnsense Mini Pc - Buy C3758 C3758r 4x Sfp+ 10gbe 2.5gbe Nas/ Virtualization Host 4x Sfp+ 10gbe Home Server For Proxmox Ve 4 10g Sfp+ Ports Pfsense Firewall Router Mini Pc Product on Alibaba.com
Q20331g9 4* Sfp+ 10gbe Ports 5 Intel 2.5gbe Lan Multifunctional Computer Vms Nas Home Server Pfsense Opnsense Mini Pc - Buy C3758 C3758r 4x Sfp+ 10gbe 2.5gbe Nas/ Virtualization Host 4x Sfp+ 10gbe Home Server For Proxmox Ve 4 10g Sfp+ Ports Pfsense Firewall Router Mini Pc Product on Alibaba.comwww.alibaba.com
Maybe a little overkill, but it a great bit of kit. I've installed pfsense on mine, I have a 10Gbe link to my LAN, 10Gbe into my DMZ and two spare 10Gbe for future expansion. I have used a combination of DAC's and 10Gbe SFP+ transceivers and haven't had a problem with compatibility.
The other 5 copper ports are all 2.5Gbe. I'm running Snort in IPS blocking mode and also ntopng for flow data. I have privacy wire guard VPN's running directly on the box to provide VPN's for all my networks, I can push 1Gb over wireguard without the Firewall breaking sweat. I can also saturate 10Gbe between my LAN and DMZ via the Firewall.
There is a thread on them here - https://forums.servethehome.com/index.php?threads/qotom-denverton-fanless-system-with-4-sfp.41331/
and a great servethehome review here - The Everything Fanless Home Server Firewall Router and NAS Appliance (servethehome.com)
I've had it a month so far - no complaints, it's been a huge upgrade on what I had before and has brought me a ton more flexibility.