Selection of Mikrotika?

Question

Mikrotik

Tell me which one to choose for the office. It takes about 20 vpn clients for rdp, forwarding through it the sip telephony of each (! Important, now the usual pptp server on debian starts stuttering sip) . Proxy server for clients 50 in peak, firewall with black lists. 1000 mbt for 2 providers.
What loads Mikrotik in principle? Firewall, nat, proxy, vpn?

Answer 1

With hardware encryption. rb4011 for example. rb2011 not only is it already old - after all, the 2015 model, it also does not lower the load below 30% in principle even with two IPSec tunnels in use. The proxy on Mikrotik is primitive, which is not surprising - where should he turn around? Router - router. The main load is routing and encryption.
JFYI: rb1100ahx2 (also already an old model) does not show above 4% load on the same two IPSec tunnels.

Answer 2

MikroTik hAP ac2 has a powerful qualcomm snapdragon IPQ-4018 716 MHz quad-core processor, 4 cores it is more powerful than hEX S on hEX S account it has a Chinese dual-core mediatek it is weaker
https://mikrotik.com/product/hap_ac2 today routers with IPQ-4018 processors are the most powerful, more powerful than only cisco, but you can’t buy it in the Russian Federation.
What does Mikrotik load in principle? Firewall, nat, proxy, vpn?
ANSWER BELOW A
router is the same computer it has a processor, RAM and flash memory the more powerful the processor and the more RAM the better the faster the packets will be processed the more RAM and the more powerful the processor the more packets the router can process
in any router there is NAT, its task is to convert ip addresses, for example, 192.168.1.101 to 65.96.14.77 this is a resource-intensive task if the router has a weak processor and little RAM, then the router cannot process many packets as a result, the speed drops or the router freezes
At this point in time, NOT all routers can work correctly with ipv6
, I will list those that can Mikrotik, d'link can (
I recommend to buy), but in TP-Link routers ipv6 support is declared but it does not work normally

Answer 3

951Ui-2HnD spins 15 L2TP + IPSEC clients, forwards SIP, drives NAT and Firewall for 20+ office computers and at the same time the processor is practically not loaded, that is, this is not the limit.
In the office, they installed such a RB2011UiAS-IN on a larger scale; there are gigabit ports and an optical one.