it is good for 1 gigabit, for this money you will also get about 130-150 Mbps IPsec, twice the speed on Wireguard, and about 250-350 Mbps in complex scenarios
also note that the recommended firmware is 7.20beta4-5 and higher, because it fixes a number of problems that are present in the current stable 7.19.4, but since the device is new, there are still problems, especially in the version with sfp
Summary
GBit speed issues with hEX S (2025 version E60iUGS) - #3 by soko
[SOLVED] Site to Site VPN (2 Mikrotik) Wireguard (Download Fast, Upload Really Slow)
5009 is a very expensive router, in my opinion it is not worth that kind of money.