35/35 on ALIX?

[jasonlitka]

I just bought some new TiVos at home to replace the last of my set top boxes from Verizon so I no longer need the Actiontec router with MCoA.  I took the opportunity to upgrade my connection from 15/5 to 35/35 as well and now I'm wondering what kind of hardware I'll need for a home router.

What kind of throughput are the ALIX users getting?  Can I get away with an ALIX 2D2 for 35/35 or am I going to need something more powerful?  I really don't plan to do much of anything with it aside from some port forwarding (one or two static, a few uPnP) and some light traffic shaping for a single VoIP account.

LAN & WAN are enough, I don't need a 3rd interface.  Wireless isn't necessary as I've got a pair of APs to cover my home (though I was thinking of, once 2.0 is available and "n" wireless works, potentially adding a wireless card to the second MiniPCI slot and ditching the 2nd floor AP).  I'm planning to use a Soekris VPN 1411 card for IPSec to my office so that's not an issue either.

[rugby]

Funny, I was just coming here to post that we got the 50/10 tier from Comcast and our Alix 2D3 handles it just fine, we run 4 IPSec tunnels and a few PPTP tunnels with no issues.  We speedtest right at our tier so I'm happy.

[networkninja]

Alix boards are capable of 80+ megabits of forwarding bandwidth. They are more than capable of doing simple nat/firewall for 35/35. If you are doing IPSec that's a different story though.

[jasonlitka]

@networkninja:

Alix boards are capable of 80+ megabits of forwarding bandwidth. They are more than capable of doing simple nat/firewall for 35/35. If you are doing IPSec that's a different story though.

That's the number I was looking for, thanks.  Light IPSec VPN usage will be handled by a VPN1411 card.

What about traffic shaping for VoIP (a single connection)?  I read somewhere here that using TS will make your throughput tank on an ALIX.  I can't find the thread though.

[jasonlitka]

Just as an update, the ALIX 2D2 has no problem so far with my 35/35.  I've not done any traffic shaping or IPSec though.  I've been fumbling around with stunnel not working.