Switching to MikroTik CCR, FW-on-a-Stick or inline upstream FW?
I just opted in for 5GbE Internet and my RB5009 can't cut it anymore. I've decided on the CCR2116-12G-4S+, however I'm also interested on having it not be the firewall, just handling routing configurations.
Thinking about switching to either an upstream FW (OPNsense) where the WAN link comes into the OPNsense FW then is passed down to the CCR, or doing a FW-on-a-stick setup with the WAN link going into the CCR and then having a trunk connected between the OPNsense FW and the CCR.
For the in-line setup, I'd not do Double NAT but set static routes to the LAN subnets, etc.
What would you prefer?