If you want that kind of horsepower out of that small of a footprint, you are going to pay the tax for it. You are basically wanting a device that can push (1 gig I assume) with everything enabled. Anything in the NUCish form like protectli can easily get around $1,000.00 versus a similar spec’d SFF or mATX for half the price.
I mean the FW6E starts at $700.00 with an i7 8550U (no ram, hdd, etc). The i3 10100 outperforms that i7 by miles (nearly 80% in some cases) with only a 40 watt higher max TDP (mere pennies in energy cost).The ability to upgrade is also gone with no PCI/e slots, minimal ram slots, and so forth.
It’s an 8th gen i7 (laptop cpu basically) vs a 10th gen i3.
I have my doubts but no real world experience with the atom processor used in the 5100.
Turns out the solution was, as you suggested, setting Crypto Hardware as: AES-NI CPU-based acceleration.
Now I get close to 900 mbps in both directions. But interesting the C3758 is nearly maxed out (cpu usage at 94%) when it’s on the download side. The i3 is solid, encryption causing the cpu to roll along at 40%.
I’m not going to lie, I’m a huge fanboi of the i310100 for routing. For home use, it can do everything as long as you have the ram to match it. And it even has iGPU support.