Which router/switch should I get for my network?

Question

Mikrotik

There is a corporate network: access level, aggregation and a router at the top. The network is divided into VLANs, in general, the classic "popsicle on a stick" scheme in the sense of "router on a stick".
The router is mainly engaged in local traffic (all the magic with several providers is already provided by another piece of iron, we do not touch it).
At the moment this router is a piece of iron with linux. Drives traffic at speeds of 900-950Mbps only in flight. But perhaps this will not be enough soon. According to preliminary calculations, a speed of 4-5Gbps will be needed. From the available found CCR1036-8G-2S +. I suppose to connect it to the aggregating switch via SFP+. The following is required from the router:
- reliability
- minimum delays, QOS support. The network has SIP
- speed 4-5Gbps, and better with a margin of 6-7Gbps
- ACL (traffic is filtered quite hard, clients are given the minimum necessary access - at the port level)
- policy routing (some types of traffic go differently, it's necessary).
It would be possible to take a switch of the 3rd level or 2+, but the inexpensive ones are quite limited in functionality and the last 2 points do not support very well, especially the last point.
According to the mind, a chassis of the 3rd level would be needed. But damn, it's expensive.
In general, has anyone used the CCR1036-8G-2S+? Is it worth your money?
There is one more idea - to stick a card with sfp + port into the linux router. But will it be possible to achieve speeds of 5-6 Gb / s?

Answer 1

As far as I know, it won't even come close. You can try to search for topics on the mikrotik.ru/forum/index.php forum about CCR (there were definitely discussions and comments on the work, but of a different model).

Answer 2

In general, as a vendor, it is better not to use Mikrotik at all as such a piece of iron, even if the chosen model pulls it in terms of performance. The fact is that mycortic, by itself, is a piece of iron that is not very stable. He can calmly withdraw into himself, and it will be good if only control is lost. For example, on CCR, as well as on other models, there was definitely a bug with cpu loading at 100% and this was corrected quite recently. More precisely, they wrote in the changelog that they corrected it.
About the question. Perhaps this will also work for an l3 switch, for example catalyst-3750-x-series, but it will come out much more expensive.