No probably about it. Once you're doing any inspection, or rules beyond very simple port and address based allow/deny, you hit the CPU quite hard. Plain routing is not CPU intensive by comparison.That probably depends on the complexity ot your rules and services u run (ips/ids comes to mind)...
Yeah I understand that. I'm still trying to find a baseline to decide if I'd be better served with a used mini pc or building a new Alder lake system.No probably about it. Once you're doing any inspection, or rules beyond very simple port and address based allow/deny, you hit the CPU quite hard. Plain routing is not CPU intensive by comparison.
I'll probably only need one or two devices to route at 10g to be honest. The rest will all be on the same subnet. Debating between a used sff optiplex (i5 9500) or building a miniitx 13100. Just want this thing to be small and quite whilst still providing 10g.Again, if you can reduce or eliminate the need for 10Gbps inter-VLAN routing, your hardware requirements for opensense simplify greatly. IDS/IPS is most useful at the border; if your ISP link is gigabit or less, normal hardware like say X10SL* is plenty. If you do find yourself needing 10Gbps inter-VLAN, consider routing those VLANs in hardware via L3 switch like something from the ICX megathread.