Thu Feb 26, 2015 2:17 pm
You're correct. Ports 1-4 share a single 1 Gbps uplink to the CPU. Ports 5-8 are directly connected to the CPU, as is the SFP port. The question is really how many networks are you routing, and how many of them need a full 1 Gbps?
I'm going to end up using one of these CCR-1009's at my home. My ISP only provides me with 75 Mbps up/down (though I can order up to 500/500). It makes sense for me to put the ISP somewhere in the switch group (ports 1-4) as I can later add additional ISPs for redundancy and load balance. Or I could get additional public IP addresses and use 3 of those ports for DMZ servers.
Bottom line, if you need a full 1 Gbps of routing performance for a particular subnet, put it on ports 5-8 or the SFP. You can put something on the switch group, but remember than any subnets routing through those ports will have to share the 1 Gbps, so use that only with subnets that don't route a lot of traffic.