DEC3960 – OPNsense® Rack Security Appliance

Up to 35Gbps Throughput / 3 Million Packets per Second / Optional Dual Power Supply and Dual SFP28 25Gbps

Enterprise Performance Redefined

High-throughput environments & redundant deployments

DEC3940 & DEC3960 with redundant power supply

Model Differentiation

Full Specifications & Model Comparison

Specification	DEC3920	DEC3940	DEC3960
Image
Software
Preinstalled software	OPNsense®	OPNsense®	OPNsense®
License	Open Source + 1 year free Business Edition	Open Source + 1 year free Business Edition	Open Source + 1 year free Business Edition
Hardware Specifications
Power supply	Single PSU	Dual PSU	Dual PSU
SFP+ Ports [10Gbps] / SFP28 Ports [25Gbps]	2 / 0	2 / 0	2 / 2
2.5GbE Ports [100/1000/2500Mbps]	4	4	4
USB-C	1	1	1
Console Port	1	1	1
Internal Storage	256GB M.2 Solid State Flash	512GB M.2 Solid State Flash	512GB M.2 Solid State Flash
Memory	16GB DDR5	32GB DDR5	32GB DDR5
CPU Cores	8	8	8
Virtual Interfaces (802.1q VLANs)	4093	4093	4093
System Performance
Firewall Throughput	36.8Gbps	36.8Gbps	36.8Gbps
Firewall Packets Per Second	3.07 Million pps	3.07 Million pps	3.07 Million pps
Firewall Port to Port Throughput	9Gbps	9Gbps	22Gbps
Concurrent Sessions	15 Million	31 Million	31 Million
Firewall Latency (average)	67µs	67µs	67µs
Firewall Policies (Recommended Maximum)	10000	10000	10000
IPsec VPN Throughput (single/multiple tunnels)	5.4Gbps / 12.5Gbps	5.4Gbps / 12.5Gbps	5.4Gbps / 12.5Gbps
IPsec VPN Packet Per Second (single/multiple tunnels)	527 Kpps / 1190 Kpps	527 Kpps / 1190 Kpps	527 Kpps / 1190 Kpps
OpenVPN DCO Throughput	2.81Gbps	2.81Gbps	2.81Gbps
OpenVPN DCO Packets Per Second	272Kpps	272Kpps	272Kpps
WireGuard Throughput	4.23Gbps	4.23Gbps	4.23Gbps
WireGuard Packets Per Second	410Kpps	410Kpps	410Kpps
Threat Protection Throughput Packet Per Second	700Kpps	700Kpps	700Kpps
Threat Protection Throughput	7.93Gbps	7.93Gbps	7.93Gbps
High Availability with State Synchronisation	Requires Two	Requires Two	Requires Two
Dimensions
Height x Width x Depth (mm)	43.65 (1U) x 482.6 (19") x 287 (259 excl. panel)	43.65 (1U) x 482.6 (19") x 287 (259 excl. panel)	43.65 (1U) x 482.6 (19") x 287 (259 excl. panel)
Height x Width x Length (inches)	1.73 x 19 x 11.1 (10.2 excl. panel)	1.73 x 19 x 11.1 (10.2 excl. panel)	1.73 x 19 x 11.1 (10.2 excl. panel)
Form Factor	19" Rackmountable	19" Rackmountable	19" Rackmountable
Weight (appliance only)	2.97 Kg	3.18 Kg	3.29 Kg
Environment
Power Requirements	100-240VAC, 50-60Hz	100-240VAC, 50-60Hz	100-240VAC, 50-60Hz
Maximum Current (single PSU)	1.52A	1.52A	1.52A
Power Consumption (Typical - single PSU)	28W	30W	36W
Heat Dissipation	95.5 BTU/hr	102.4 BTU/hr	122.8 BTU/hr
Operating Temperature	0 to +45°C	0 to +45°C	0 to +45°C
Storage Temperature	-20 to +70°C	-20 to +70°C	-20 to +70°C
Humidity	10-90% non-condensing	10-90% non-condensing	10-90% non-condensing
Regulatory Compliance
Certifications	FCC Part 15 Class A, CE, RoHS, REACH	FCC Part 15 Class A, CE, RoHS, REACH	FCC Part 15 Class A, CE, RoHS, REACH

All measurements are based upon TCP traffic unless stated otherwise. Total Firewall Throughput is calculated based on maximum PPS and standard 1500 byte packets. Maximum PPS is measured using 500 byte packets. IPS performance is measured using 25K ET Open malware rules and standard 1500 byte packet size. (SSL) VPN is measured using AES256GCM16. Concurrent sessions are based upon memory available, where one state consumes 1KB of memory and 1GB of memory is reserved for system tasks. Latency is measured as an average over 60 seconds.

Supported SFP(+) Modules

When using SFP+ modules, do not mix 2.5/5Gbps and 10Gbps link speeds, as the hardware does not support combining these modes due to different operating frequencies.

While most standard LC-LC OM3 SFP+ modules and SFP+ Direct Attached Cables are likely to function, we recommend selecting one of the known compliant modules listed here: https://docs.opnsense.org/hardware/sfp_compatibility.html