OPNsense® DEC850 – fanless desktop appliance with AMD EPYC and 17.4 Gbps
Four 2.5 Gigabit ports and two SFP+ at 10 Gbps, 17.4 Gbps firewall throughput, 2.5 Gbps IPsec, 16 GB DDR4 and 256 GB M.2 – fanless in 199 × 186 × 48 mm.
The DEC850 is built around an AMD EPYC with eight cores up to 3.1 GHz. OPNsense® comes preinstalled with one year of the Business Edition included. An optional wall mount is available. The appliance is designed, manufactured and shipped by Deciso in the Netherlands.
Six reasons for the DEC850
17.4 Gbps firewall throughput
1,450 kpps, 9 Gbps port to port, 100 µs average latency.
15 million concurrent sessions
Bounded by available memory according to the manufacturer's footnote, here 16 GB DDR4.
Six ports, two of them SFP+
4 × RJ45 2.5 GbE and 2 × SFP+ at 10 Gbps, plus two USB 3.0 ports.
IDS/IPS at approx. 2 Gbps
163 kpps threat protection, measured with ET Open using 1500-byte packets.
Fanless at 45 W
An eight-core AMD EPYC without a fan. 153.6 BTU/hr heat dissipation, maximum 1.4 A.
Made in EU, two-year warranty
Carry-in & return directly from the manufacturer, including one year of OPNsense Business Edition.
Typical deployment scenarios
- Firewall and routing on connections up to 10 gigabit
- Fibre uplink over SFP+ without an additional network card
- IDS/IPS with Suricata and web proxy
- IPsec site-to-site links at 2.5 Gbps throughput
- Wall mounting in technical rooms without a rack
- Redundant operation with state synchronisation, two units required
Deployment scenarios are recommendations by inett based on the performance figures, not statements by the manufacturer.
Full technical specifications
| Preinstalled software | OPNsense®, Open Source + 1 year Business Edition |
| Processor | AMD EPYC, 8 cores, up to 3.1 GHz |
| Memory | 16 GB DDR4 |
| Internal storage | 256 GB M.2 solid state flash |
| SFP+ ports (10 Gbps) | 2 |
| RJ45 ports (100/1000/2500 Mbps) | 4 × 2.5 GbE |
| USB 3.0 ports | 2 |
| Console port | 1 |
| VLANs (802.1q) | 4,093 |
| Firewall throughput | 17.4 Gbps |
| Firewall packets per second | 1,450 kpps |
| Port to port throughput | 9 Gbps (1,450 kpps) |
| IPsec VPN throughput (AES256GCM16) | 2.5 Gbps (220 kpps) |
| Threat protection (IDS/IPS) | approx. 2 Gbps (163 kpps) |
| Concurrent sessions | 15,000,000 |
| New connections per second | 50,000 |
| Latency (average) | 100 µs |
| Firewall policies (recommended maximum) | 10,000 |
| High availability | with state synchronisation, requires two units |
| Form factor | Desktop, fanless, optional wall mount |
| Dimensions (H × W × D) | 48 × 199 × 186 mm |
| Weight | 2.0 kg (appliance), 2.7 kg including power supply |
| Power requirements | 100–240 V AC, 50–60 Hz, max. 1.4 A |
| Power consumption | 45 W typical |
| Heat dissipation | 153.6 BTU/hr |
| Operating temperature | 0 to +50 °C |
| Storage temperature | −20 to +70 °C |
| Humidity | 10–90 %, non-condensing |
| Regulatory compliance | CE, FCC part 15 Class A, RoHS |
Package contents
- Desktop appliance
- Power supply
- Matching power cord
- Configuration cable
- Quickstart guide
Warranty and support
Two-year carry-in & return warranty from Deciso. inett assists with sizing, commissioning and day-to-day operation – including monitoring and maintenance on request.
Frequently asked questions
Which connection can the DEC850 serve?
Deciso states 17.4 Gbps firewall throughput at 1,450 kpps and 9 Gbps port to port. Over IPsec with AES256GCM16 it is 2.5 Gbps at 220 kpps, with threat protection approx. 2 Gbps.
What exactly is the firewall throughput?
Deciso states 17.4 Gbps in the specification table and 17.6 Gbps in the description text on the same page. We use the table figure.
How does the DEC850 differ from the DEC840?
16 instead of 8 GB DDR4, 8 instead of 4 CPU cores at 3.1 instead of 2.9 GHz, 4 × 2.5 GbE instead of 4 × GbE. Firewall throughput 17.4 instead of 14.4 Gbps, 15 instead of 7 million sessions. Storage, chassis and dimensions are identical.
Can 2.5 and 10 gigabit modules be mixed?
No. Deciso explicitly states that 2.5/5 Gbps and 10 Gbps link speeds must not be mixed – the hardware does not support it due to different frequencies.
Want us to check the sizing?
We match connection speed, user count, VPN load and planned services against the performance figures. A short message is enough.
One class smaller?
View the OPNsense DEC750 desktop appliance
Prefer a 19-inch rack?
All measurements are based on TCP traffic unless stated otherwise. Total throughput is derived from the maximum packet rate and 1500-byte packets. The maximum packet rate was measured with 500-byte packets. IPS performance was determined using ET Open and 1500-byte packets. VPN measured using AES256GCM16 and SHA512. Concurrent sessions follow from available memory, where one state consumes 1 KB and 1 GB is reserved for system tasks. Latency is an average over 60 seconds. Source of all technical data: Deciso product page.