I've come full circle to just running an i5 with Linux/nftables (my first router was a k5 with ipfwadm). I already had the i5, and gigabit VPN can use the horsepower.

I wanted to like pfSense, but I didn't want to learn a whole new net stack to debug firewall rules. Not that you have to dig that deep to simply use pfSense, but I ran into some config problem and missed the insight I take for granted on Linux.

Reading the comments on the OP is kind of funny, too: ESR regarding an "old PC" as a router:

> and use what for ports? Even newer ones tend to have only two. That's poor fanout.

The ports you see on an embedded router are actually just a tagged switch. A good CPU has two internal ports connected to that switch, but many have only one. Some switch chips can eg accelerate NAT, but OpenWRT is going to erase that. So embedded router bandwidth is actually quite poor, meanwhile you can essentially stick as many true 1Gb/10Gb ports in a PC router as you desire.

I got an Asus AC 5300, it works great. I can get 450 Mbps downloads and uploads easily, and get good coverage.

I've also installed the Linksys Velop mesh system for a number of people now, and I can crank out similar speeds with that.

The speed ratings I have seen for the Ubiquiti products are half that, at best.

Here's another thread which mentions this issue: https://community.ubnt.com/t5/UniFi-Wireless/UniFi-AP-AC-LR-...

The Unifi product line works well for environments where non-network savy people are involved. I've installed them in a number of non-profits, my relative and friends homes with great success. By success, I get no questions or complaints about WiFi coverage or access. Ubiquiti has done a pretty incredible job of making multiple AP setup and management easy for a low price.

For people who want a router + APs, I recommend the USG Gateway, Unifi Cloud Key, and one or more AP-AC-Lite's. As an alternative to the USG Gateway, I use Ubiquiti Edgerouter POE's or ER-X's.

I've used a USG myself, but may switch to a pfsense router as the USG lacks some advanced features that aren't available in the USG.

Background: In the 90's I built my own firewalls, then moved to SG300's from an Australian company that eventually got purchased by McAfee (I think?), then to DD-WRT on WRT54G's, then Tomato, then Asuswrt-Merlin, and then to the USG. Why not continue on the opensource route? I just wanted a firewall that worked and was easy to maintain. The Ubiquiti Edge Router and Unifi Security Gateway met most of my requirements and I've been satisfied. I'm happy to answer any questions.

If the customer can get away with a single wifi router (eg. Asus AC 5300) that will generally be easiest for them to manage (eg. easy to reset if necessary, no concern that older devices are connecting to the wrong access point). It also gives very strong download speeds (around 450Mbps for a gigabit connection).

If the customer needs multiple devices the Linksys Mesh system has worked very well. I can connect the nodes to each other wired or wirelessly, and I can get speeds in a similar range as a single router (450Mbps). The Linksys app is dead simple to setup and restart the system, and clients have even been able to apply firmware updates from their phone without issue.

I don't consider the Ubiquiti software easy to use for general consumers, so I would only install their products if I was planning to fully manage the network for them, i.e. they would have to call me in the event that the power went out and the system didn't come back up correctly or something.

Regardless of ease-of-use, I am more concerned about the speed. It seems like the Ubiquiti access point I have installed top out around 200 Mbps, so I don't even want to use them for my own house.

My guess was that the Ubiquiti devices were designed for use in an office setting, where making sure that everyone can connect is more important than enabling the fastest speed for say 5-10 devices.

Maybe I could get more out of it if I tried switching channels or something, but I'm pretty happy with it as it is. If my Internet speeds were anywhere close to that maybe I'd try their "AC-PRO".