What would be the best and most powerful MT SOHO router (switching speed is not required) with passive cooling?
If no WLAN’s required, then RB750GR3, can still add WLAN’s but will be a separate device, else HAP AC^2
RB750GR3 and HAP are probably for small home type of usage. Sorry I didn’t specify but I was thinking for something more like an office type of router that can handle 2-3 fast ethernet internet connections and a few dozen firewall rules with possibly a dozen active VPN connections. WiFi is not really necessary for this usage. Possibly something like CCR1009 as it has passive cooling.
If the VPN connections are IPSec, then the RB750Gr3 should be enough. Take a look at it’s specs: pure IPSec it can handle about 400 Mbps total. True, it will be less, with L2TP and firewall rules. But do You really need all this with the VPN? The most probable use will be far less intensive.
True, You will cut a little close to max, if You choose to really tax the connections.
If this is the case, why not an RB1100AHx4? It can route 7Gbps, and can handle about 2 Gbps of IPSec VPN. And costs about half of a CCR 1009. Yes, it is passive cooled too. 
Yes, I think RB1100AHx4 would be perfect, thank you. I thought RB1100 was not passive cooling though. I had older models and they were not for sure. I agree, CCR1009 is an overkill for what I want.
Its predecessor, the RB1100AHx2, isn’t. They were PPC jobs. The 1100AHx4 is an ARM job.
No one mentioned the
RB450Gx4
The RB450Gx4 would be nice also for home usage but for a bigger office I don’t think it can handle it. For example, if I want to add the full IPv4 BGP table as well as IPv4 country blocking then I am not sure that even the latest model of RB1100 would be capable of handling it. Is that a job for a CCR1009? Can it handle all this without any significant cpu/latency increase and still work with passive colling?