Qotom Denverton fanless system with 4 SFP+

[Caennanu]

To add to the above. Here is the very very official documentation for atleast the dutch residents:

Staatsblad 2016, 524 | Overheid.nl > Officiële bekendmakingen

zoek.officielebekendmakingen.nl

And this... should be the EU version:

Router Freedom - FSFE

It should go without saying that in our society we should be able to freely choose technical devices for use in our homes like we are free to choose what m...

fsfe.org

.

 

[blunden]

Ill supply some more details later. But this is atleast the Dutch ruling: Vrije modemkeuze | ACM

It is a bit vague, but what it comes down to is that anything after the fiber termination is part of our right for having your own router. And the isp is obligated to tell you what it should comply to.

Interesting. The Dutch ruling could be interpreted like that, as long as the transceiver behaves properly. That doesn't mean it applies to the entire EU though as far as I can tell.

To add to the above. Here is the very very official documentation for atleast the dutch residents:

Staatsblad 2016, 524 | Overheid.nl > Officiële bekendmakingen

zoek.officielebekendmakingen.nl

And this... should be the EU version:

Router Freedom - FSFE

It should go without saying that in our society we should be able to freely choose technical devices for use in our homes like we are free to choose what m...

fsfe.org

.

I read the EU version as referring to your right to you your own router, not PON ONT or media converter (in the case of AON). Sure, it talks about the Network Termination Point so there i still some room for interpretation, but all the arguments for why the law is needed doesn't apply nearly as much to ONTs.

 

[Caennanu]

Interesting. The Dutch ruling could be interpreted like that, as long as the transceiver behaves properly. That doesn't mean it applies to the entire EU though as far as I can tell.

I read the EU version as referring to your right to you your own router, not PON ONT or media converter (in the case of AON). Sure, it talks about the Network Termination Point so there i still some room for interpretation, but all the arguments for why the law is needed doesn't apply nearly as much to ONTs.

Yeah i am aware. Its legal Mambo jambo which always leaves stuff open for interpretation...
However without disclosing where i work. The ONT for the Dutch is indeed part of this right.

 

[blunden]

Yeah i am aware. Its legal Mambo jambo which always leaves stuff open for interpretation...
However without disclosing where i work. The ONT for the Dutch is indeed part of this right.

Good information for the Dutch users on here. That doesn't necessarily mean the same applies to any other EU country though. Even if the Dutch law is based on an EU directive, I believe that countries have some leeway in their local law implementing it as long as covers at least what's in the directive.

 

[John T Davis]

In mid-May 2026, as someone who hasn't bought this yet, but is considering an upgrade from an N300-based box so I can get more PCIe lanes and avoid the potential network speed bottlenecks associated with the N3xx's lack of lanes …

Is this box/CPU still considered the goto option at this price point for a self-contained OPNSense firewall box?
As mentioned up-thread, it (and its QAT implementation) is pretty old at this point.

Put another way, if you were looking to buy a desktop or 1U OPNSense box today using a low power enterprise-class chip (e.g., Atom), would you still consider this, or be looking at something else?

Honestly, I'm also put off by how many people still report their boards randomly dying. AliExpress does not make it easy to tell what revision you're getting.

 

[blunden]

In mid-May 2026, as someone who hasn't bought this yet, but is considering an upgrade from an N300-based box so I can get more PCIe lanes and avoid the potential network speed bottlenecks associated with the N3xx's lack of lanes …

Is this box/CPU still considered the goto option at this price point for a self-contained OPNSense firewall box?
As mentioned up-thread, it (and its QAT implementation) is pretty old at this point.

Put another way, if you were looking to buy a desktop or 1U OPNSense box today using a low power enterprise-class chip (e.g., Atom), would you still consider this, or be looking at something else?

Honestly, I'm also put off by how many people still report their boards randomly dying. AliExpress does not make it easy to tell what revision you're getting.

The N305 is significantly faster in raw CPU performance and also in routing throughput, as long as you aren't limited by PCI-E bandwidth. You simply need to avoid models with PCI-E 2.0 NICs.

If you insist on running an OS with bad driver support such as FreeBSD, that means you need a model with Intel X710 or Mellanox ConnectX-3 or later NICs if you want to use the N-series of CPUs.

The Atom C3000 series SoCs are great if you need good IPsec performance with the help of QAT. I believe it can also give you high OpenVPN performance if you use OpenVPN DCO + QAT, but it won't benefit Wireguard. The C3758 will route at 10 Gbit/s with multiple streams, but not single streams in my experience as long as you stick to kernel networking. With VPP, I imagine it can do it with a single stream as well but I haven't tried it myself.

You could also look at the Minisforum MS-01 if you don't need a fanless model.

 

[ZPrime]

I searched the thread and didn't find much - has anybody figured out if it's possible to control the fan speed in software? lm-sensors doesn't seem to find any PWM controls...

I have the desktop / passive version, but I cut a hole in the bottom and put a 40mm fan down there as intake. I stuck in a screamer and was hoping I could purposefully force it to higher speed to help get a little airflow through the SFP cages. The unit is sitting right below a Cisco Cat3850 that makes a ton of noise, so even if I turn up the screamer to 50-75% it probably won't be audible over the switch...

Also, what is necessary to get QuickAssist working on Proxmox 9.x? I've got kernel v7.0.x and dmesg shows the QAT device, and i see a module loaded for it, but openssl at least doesn't seem to use it...