Which router model for Internet Cafe (150 PCs)?

RouterOS Beginner Basics
1

Hi, Mikrotik members.

I’m running Internet Cafe and decide to. Hange router to Mikrotik finally.
Our cafe has 150 clients and 1Gbps fibre internet and needs to setup bandwidth control, game priority and anti hacking.

I have RB4011 and tested last year. But it was hacked like DDOS attack and changed to normal QoS router.

Is the RB4011 enough for 150 client PCs?
Can you recommend which model is enough for internet cafe?

CCR2004?
How about computer router? (i5 - 7400 , 16g ram?)
Can you recommend computer hardware spec if I go with PC?

Thanks

2

RB5009 should be fine for internet cafe.

There is no router on MT that will prevent DDOs attack, seems like your iSP failed to protect you from the last one.
The only method I am aware of, and one that apparently works, is linked here… https://github.com/team-cymru/network-security-templates/blob/master/UTRS-Peering-Guide/README.md

Suggest using remotewinbox which has partnered (signed up) with Team cymru to provide that level of protection.

Otherwise also suggest as a provider of a decent blacklist etc… https://itexpertoncall.com/promotional/moab.html

Finally, the only additional suggestions for firewall along with default settings are found at apprentice setup here - https://forum.mikrotik.com/viewtopic.php?t=180838

3

Hi, Mikrotik has their oven script for ddos attack

https://help.mikrotik.com/docs/pages/viewpage.action?pageId=28606504

But if there will be big attack no hw will help you…only Google cloud Armor can protect you…which is paid…

https://cloud.google.com/blog/products/identity-security/how-google-cloud-blocked-largest-layer-7-ddos-attack-at-46-million-rps

4

i5 - 7400 , 16g ram?

if you already have it available go with it, it will perform better than a rb4011/rb5009

5

RB4011 should be able to handle more than 150PCs and your bandwidth as well.

With regards to your DDoS issue, it’s possible that your ISP failed protection in their end, but nevertheless, if you configure properly your firewall rules, you could easily protect your network.

6

Baloney, your router cannot protect you against a DDOS attack… why do people keep spreading this fud…

7

Thank you Chechito.
Is the i5-7400 better than CCR2004?

8

Thank you guys.
Your posts are very helpful. :slight_smile:

9

Better? you only have 150 clients and 1Gbits at most.
i5 is even overkill. RB4011 or RB5009 will serve your Internet Cafe without even running hot :wink:
Difficult to compare Intel i5 vs ARM64-chipset in detail.