It seems MikroTik hAP ac2 will be released next month. I have a few questions.

1. How many years will hAP ac2 receive RouterOS updates for? I want to get security updates and general fixes at least.
2. According to https://mikrotik.com/product/hap_ac2#fndtn-testresults, hAP ac2's IPsec throughput is approximately 385~424Mbps. Is OpenVPN throughput approximately the same? Or, shall I learn to set up IPsec in my own VPS accounts?
3. The antennae are hidden. Can WiFi performance take a hit because antennae are hidden?
4. How good is 802.11ac performance?
5. Can I extend the storage with a USB storage device? 16MB feels a bit small.

1. Forever is my guess. Mikrotik doesn't have separate software for different hardware, the software is the same for everything.
2. NO. Once you start doing something other than routing the data your through put drops like a rock. 3. Yes it can take a hit, but often my Mikrotik preforms as well as any box set wifi. I use ubiquiti on anything i want real coverage for though.
4. Cant say
5. Yes via usb.

2. NO. Once you start doing something other than routing the data your through put drops like a rock.

Code: Select all

RBD52G-5HacD2HnD-TC IPQ-4018 IPsec throughput
Mode Configuration 1400 byte 512 byte 64 byte
kpps Mbps kpps Mbps kpps Mbps
Single tunnel AES-128-CBC + SHA1 37.9 424.5 59 241.7 61.6 31.5
256 tunnels AES-128-CBC + SHA1 36 403.2 38.5 157.7 39.8 20.4
256 tunnels AES-128-CBC + SHA256 36 403.2 38.5 157.7 39.8 20.4
256 tunnels AES-256-CBC + SHA1 34.4 385.3 37.9 155.2 39.8 20.4
256 tunnels AES-256-CBC + SHA256 34.4 385.3 37.9 155.2 39.8 20.4

Can you post your OpenVPN throughput test?

Ovpn implementation lacks the udp support and the compression. Run a tunnel over tcp is a nonsense from the performance point of view, because the response times will be terrible comparing to the udp mode.

Ovpn implementation lacks the udp support and the compression. Run a tunnel over tcp is a nonsense from the performance point of view, because the response times will be terrible comparing to the udp mode.

Is L2TP/IPsec any better in hAP ac2?

Should be. But nothing than real test in your case can provide the answer. At least you can expect that hardware encryption acceleration will take place.

I am looking forward to buy this model once it is available too. With such description and price there is nothing else similar you can buy.

Should be. But nothing than real test in your case can provide the answer. At least you can expect that hardware encryption acceleration will take place.

I am looking forward to buy this model once it is available too. With such description and price there is nothing else similar you can buy.

What kinds of hardware encryption acceleration does RouterOS or hAP ac2 offer?

Should be. But nothing than real test in your case can provide the answer. At least you can expect that hardware encryption acceleration will take place.

I am looking forward to buy this model once it is available too. With such description and price there is nothing else similar you can buy.

What kinds of hardware encryption acceleration does RouterOS or hAP ac2 offer?

only IPsec

I have one question too. LED 1-5 meanings can be changed in mibsbe devices, I suppose hAP ac2 do not have this possibility? There are no LED 1-5 settings in /system leds.

Ovpn implementation lacks the udp support and the compression. Run a tunnel over tcp is a nonsense from the performance point of view, because the response times will be terrible comparing to the udp mode.

SSTP works very well and is TCP

Can someone to tell me how good is wifi compared to RB 951 series for example ? i asking for wifo range.

Can someone to tell me how good is wifi compared to RB 951 series for example ? i asking for wifo range.

I have 5 here to test, but until all Arm based WiFi devices from Mikrotik doesn’t perfome
Well at the moment, I don’t testet it jet

SSTP works very well and is TCP

What are you criteria for "very well"?

If there is no packet loss, everything works very well. But imagine what happens if a transport packet is lost for a TCP session tunnelling a TCP session, and imagine what happens when RTP (which uses UDP because a loss of a single packet is much more tolerable than delay of the audio playback until that lost packet gets successfully retransmitted) is tunnelled using a TCP transport and a transport packet is lost.

These are the reasons why the VPN transport should not be TCP.