✔ Pros:Strong routing throughput for its class, about 18.5 to 18.7 Gbps L3; 10GbE SFP+ uplinks plus 2.5GbE LAN ports suit small business and home-lab backbones; Runs pfSense Plus with a mature feature set, and Netgate offers TAC support with licensing; Passive cooling gives quiet operation; Rack mount kit available for the BASE configuration; BASE listing states unlimited IPsec tunnels (licensing statement, not capacity)
✘ Cons:Netgate does not publish session capacity or new sessions per second in the sources reviewed, so sizing for busy networks is difficult; IPsec throughput of roughly 1.8 to 2.1 Gbps with AES-GCM is modest for a 10GbE-class device; Atom C3558 CPU limits performance under mixed IMIX traffic and inspection-heavy loads; Threat prevention throughput is not published, and pfSense Plus does not ship IDS/IPS as a built-in feature; Prices vary widely between resellers and configurations, and the 2021 launch price of $699 is outdated; Form factor is inconsistent across listings (desktop versus 1U)
IPsec VPN Throughput: Not published by Ubiquiti; WireGuard/Site-Magic VPN up to 500 Mbps (third-party review, untested method)
Max Sessions: Not published
New Sessions/sec: Not published
Interfaces: 5x 2.5GbE RJ45 (1 WAN + 4 LAN, one LAN port can be remapped to a second WAN)
Form Factor: Compact desktop, 142 x 127 x 30 mm, USB-C 5V/5A power (max 16.1 W)
Curation Review
✔ Pros:2.5GbE WAN and LAN ports on a compact, low-power chassis (max 16.1 W); 512GB built-in NVMe storage on the standard SKU for local UniFi data; Integrated UniFi controller with IDS/IPS and no license or subscription fees; Supports 300+ clients and 30+ UniFi devices; Multi-WAN capable through the remappable LAN port
✘ Cons:Only 1.5 Gbps with IDS/IPS enabled, well below the 2.5 Gbps routing figure; IPsec VPN throughput, session counts and new sessions per second are not published; No PoE output and no built-in Wi-Fi access point; No LAG/LACP support; 500 Mbps VPN throughput is limiting for high-volume site-to-site tunnels