Protectli V1610: Routed Download Observations

Name: Protectli V1610: Routed Download Observations
Creator: Trevor Unland
Published: 2026-10-28
License: https://github.com/TrevTron/protectli-home-soc/blob/main/LICENSE

I measured short, certificate-validated downloads through the final IDS and IPS configurations using the same fixed endpoint. The individual trials stay here alongside their medians because the Internet path varied between requests.

This page keeps the shared controls, retained measurements, failures, and comparison limits together. The linked files are there when you need the underlying table or method.

What you can compare here

These rates include connection and TLS setup. Upstream conditions, endpoint behavior and other client traffic were not isolated, so the difference does not measure inspection overhead or maximum forwarding capacity.

Read the article Project repository

You can reuse Trevor-measured data from this page under the repository MIT terms. Retain the required notices when reusing the project documentation, and credit Trevor Unland when citing this run. Project media has separate terms in the repository.

Recorded results

Open the details under any row for the specific setup, outcome, artifact identity, and supporting file.

PCAP IDS

Routed Internet · three complete 25 MB requests

Published result

Measured on Protectli V1610 · Owned client routed through the Vault

Median rate: 537.017 Mbps; Three complete trials, including connection and TLS setup.
Complete trials: 3 of 3; 25,000,000 bytes each after one 1,000,000-byte warmup. (requests)
Sampled core maximum: 60 °C; Separate native resource sampling; may miss short request peaks.

Individual payload rates were 537.017, 533.622, 549.84 Mbps. Every request completed under the same final-platform protocol; the median describes this endpoint/path observation.

Setup and original evidence

Protectli V1610 · OPNsense 26.7.5 / Suricata 8.0.7_1 · Owned client routed through the Vault · Routed Internet · three complete 25 MB requests

Pinned results and method Actual test host

Netmap IPS

Routed Internet · three complete 25 MB requests

Published result

Measured on Protectli V1610 · Owned client routed through the Vault

Median rate: 493.027 Mbps; Three complete trials, including connection and TLS setup.
Complete trials: 3 of 3; 25,000,000 bytes each after one 1,000,000-byte warmup. (requests)
Sampled core maximum: 48 °C; Separate native resource sampling; may miss short request peaks.

Individual payload rates were 493.027, 480.639, 623.063 Mbps. Every request completed under the same final-platform protocol; the median describes this endpoint/path observation.

Setup and original evidence

Protectli V1610 · OPNsense 26.7.5 / Suricata 8.0.7_1 · Owned client routed through the Vault · Routed Internet · three complete 25 MB requests

Pinned results and method Actual test host

Supporting evidence

Results and method

These are the few files that support this page directly. The repository holds the wider project history.

All transfer trials and resource samples Durations, rates, sampling method and historical-platform boundary.Owned path protocol Binding, benign traffic checks and preservation requirements.

Controls

Explicit owned-client source binding, fixed Cloudflare endpoint 172.66.0.218 with hostname speed.cloudflare.com and certificate validation.
Each mode used a 1,000,000-byte warmup, then three 25,000,000-byte requests with 30-second limits.
Each result required HTTP 200, curl exit 0, exact bytes and the intended source/destination. Rate = bytes × 8 / time_total / 1,000,000.
Native resource sampling used 15 iterations at roughly two-second cadence, discarding cumulative vmstat rows. Short request peaks may fall between samples.

What this run established

$All six final requests completed. IDS trials were 537.017, 533.622 and 549.840 Mbps; IPS trials were 493.027, 480.639 and 623.063 Mbps.
$Sampled maxima were 60 °C / 4% busy for IDS and 48 °C / 18% busy for IPS. These are interval observations, not certified per-request peaks.
$Earlier OPNsense 26.1.2 IDS observations remain in the source as history and are excluded from this final-platform comparison.