OPNsense® DEC3852 – 19-inch 1U rack appliance with AMD EPYC and 17.4 Gbps
Four 2.5-gigabit ports and two SFP+ at 10 Gbps, 17.4 Gbps firewall throughput, 2.5 Gbps IPsec, 16 GB DDR4 and 256 GB M.2 flash – in a 1U enclosure under 26 cm deep.
The DEC3852 runs an AMD EPYC Embedded processor with eight cores up to 3.1 GHz on the Netboard A20. OPNsense® is preinstalled and one year of the Business Edition is included. Deciso positions the DEC3800 series for businesses and enterprises and states a depth of under 26 cm, so it fits any cabinet. The appliance is developed, manufactured and shipped by Deciso in the Netherlands.
Six reasons for the DEC3852
17.4 Gbps firewall throughput
1,450 kpps, 9 Gbps port to port, 100 µs average latency.
Four 2.5 GbE ports and two SFP+
4 × RJ45 at 100/1000/2500 Mbps and 2 × SFP+ at 10 Gbps, freely assignable.
15 million concurrent sessions
Limited by the available memory according to the manufacturer footnote, here 16 GB DDR4.
2.5 Gbps IPsec
220 kpps with AES256GCM16, threat protection around 2 Gbps at 163 kpps.
Under 26 cm mounting depth
282 mm including the front panel, 259 mm without – it fits any cabinet according to Deciso.
Made in EU, two-year warranty
Carry-in and return warranty direct from Deciso, including one year of OPNsense® Business Edition.
Typical applications
- Firewall and routing on connections up to 10 gigabit
- Fibre uplink over SFP+ without an additional network card
- IDS/IPS with Suricata and web proxy at around 2 Gbps
- IPsec site-to-site links at 2.5 Gbps
- Rack mounting in a server cabinet at 259 mm depth without the front panel
- Redundant operation with state synchronisation, two units required
Application scenarios are recommendations by inett based on the performance data, not statements by the manufacturer.
Full specifications
| Preinstalled software | OPNsense®, Open Source + 1 year Business Edition |
| Typical applications | Firewall / routing, VPN, IDPS |
| Processor | AMD EPYC Embedded, 8 cores, up to 3.1 GHz |
| Board | Netboard A20 |
| Memory | 16 GB DDR4 |
| Internal storage | 256 GB M.2 solid state flash |
| SFP+ ports (10 Gbps) | 2 |
| RJ45 ports (100/1000/2500 Mbps) | 4 × 2.5 GbE |
| USB 3.0 ports | 1 |
| Console port | 1 |
| VLANs (802.1q) | 4,093 |
| Firewall throughput | 17.4 Gbps |
| Firewall packets per second | 1,450 kpps |
| Port-to-port throughput | 9 Gbps |
| Port-to-port packets per second | 1,450 kpps |
| IPsec VPN throughput (AES256GCM16) | 2.5 Gbps |
| IPsec VPN packets per second | 220 kpps |
| Threat protection (IDS/IPS) | approx. 2 Gbps (163 kpps) |
| Concurrent sessions | 15,000,000 |
| New connections per second | 50,000 |
| Firewall latency (average) | 100 µs |
| Firewall rules (recommended maximum) | 10,000 |
| High availability | with state synchronisation, two units required |
| Form factor | 19-inch rack mountable, 1U |
| Dimensions (H × W × D) | 43.65 × 482.6 × 282 mm (259 mm without front panel) |
| Weight (appliance only) | 3.45 kg |
| Power supply | 100–240 V AC, 50–60 Hz |
| Maximum current | 2.2 A |
| Power consumption | 45 W typical |
| Heat dissipation | 153.6 BTU/h |
| Operating temperature | 0 to +50 °C |
| Storage temperature | −20 to +70 °C |
| Humidity | 10–90 %, non-condensing |
| Certifications | CE, FCC part 15 Class A, RoHS |
Package contents
- 19-inch 1U rack appliance
- Matching power cord
- Configuration cable
- Quick start guide
Warranty and support
Two-year carry-in and return warranty from Deciso, including one year of the OPNsense® Business Edition with the commercial firmware repository, GeoIP database and the free professional plugins. inett supports sizing, commissioning and day-to-day operation, with monitoring and maintenance on request.
Frequently asked questions
Which internet connection can the DEC3852 serve?
Deciso states 17.4 Gbps firewall throughput at 1,450 kpps and 9 Gbps port to port. Over IPsec with AES256GCM16 it is 2.5 Gbps at 220 kpps, with threat protection around 2 Gbps.
What exactly is the firewall throughput?
Deciso states 17.4 Gbps in the specification table and 17.6 Gbps in the descriptive text on the same page. We use the table value.
How does the DEC3852 differ from the DEC3862?
16 instead of 32 GB DDR4, 256 instead of 512 GB storage and 15 instead of 31 million concurrent sessions. Processor, ports, throughput, enclosure and power consumption are identical.
How does the DEC3852 differ from the DEC850?
The DEC850 is the fanless desktop version, the DEC3852 the 19-inch rack version. Processor, memory, ports and performance data are identical according to Deciso; the DEC3852 has one USB port instead of two.
Shall we check the sizing together?
We compare line speed, number of users, VPN load and planned services against the performance data. A short message is enough.
More memory and sessions needed?
All measurements refer to TCP traffic unless stated otherwise. Total firewall throughput is calculated from the maximum packet rate and 1500-byte packets. The maximum packet rate was measured with 500-byte packets. IPS performance was measured with ET Open and 1500-byte packets. SSL VPN was measured with AES256GCM16 and SHA512. Concurrent sessions follow from the available memory, where one state occupies 1 KB and 1 GB is reserved for system tasks. Latency is an average over 60 seconds. Source of all technical data: Deciso product page.