How soft VLAN loads percent. Mikrotiks?

Question

network hardware

I am planning a Mikrotik router to divide the network into VLAN segments.
I'm looking at options for the central piece of hardware that will route traffic, vlan + fw + firewall rules for allowed ports, from one network to another.

Question
How critical is it that 4011 does not have HW Offload VLAN? After all, traffic, in theory, will still pass through the processor with my scheme.
VLAN + FORWARD + FIREWALL on RB4011 how much is a working option? Strongly, will it eat percent? Can I wrap tagged traffic to the SFP port?

UPD1: I took information on device capabilities here: https://wiki.mikrotik.com/wiki/Manual:Switch_Chip_...

Answer 1

It all depends on the loads that give go.
And so for RB4011 in the changelogs there is a line

7.1rc1
added bridge HW offload support for vlan-filtering on RTL8367 switch chip (RB4011, RB1100AHx4);

Those. in theory, since version 7.1 there is hw offload. Another question is are you ready for the 7th version?