Which Microtik routers to choose for IPSec organization?

Question

VPN

There was a task to organize a VPN connection with remote offices, incl. for video conferencing (FullHD + interactive content), which in our case requires about 50 Mbps (the most frequent conferences with 2-3 participants; in fact, the requirements are, of course, lower, but there are a number of demanding tasks that you don’t want to get into a puddle with ). It is required to organize IPSec with minimal cost.
The solution is seen as an alternative to a VPN solution rented from a provider (high monthly fees and terrible stability problems, but the claimed speed is quite high, in the same orders of magnitude).
What to choose for remote offices from Microtik products (40-50Mbps encryption)? What to choose for central (~100Mbps encryption)?
PS. СКЗИ сертифицированные по ФСТЭК тоже присутствуют, IPSec в плане безопасности скорее как приятная опция.
PPS. В плане топологии: рассмотрим вариант, когда между доп. офисами трафик не ходит, всё через центральный (серверы).

Answer 1

В центр например 1100AHx2 или уже ccr1008 (избыточный вариант но с большим запасом), в филиалы 951е и будет тебе счастье)

Answer 2

telecom-sales.ru/marshrutizatoryi/ethernet-router/... at a price of 27 rubles and telecom-sales.ru/marshrutizatoryi/wi-fi-router/rb9... will give a speed of about 10 Mbps per branch (the limitation is related with the fact that 951 uses the processor for encryption). There is also an MRTG850 with support for hardware encryption - it will work almost at the speed of the port (more precisely, at the speed of the communication channel)

Answer 3

The cheapest model with support for hardware encryption is RB850Gx2. All CCRs also have hardware encryption. The most inexpensive is CCR1009-8G-1S-PC ($425). In both options, encryption does not load the processor. On rb951, traffic is encrypted by the processor and you will not receive 50 Mbps. I achieved a maximum of 40-45 at 100% CPU.