DEC3800 Series – OPNsense® Rack Security Appliance [Update 2024]


DEC3842 / DEC3852 / DEC3862

OPNsense® Rack Security Appliance

Businesses & Enterprises


AMD EPYC™ Performance.
 Rack mountable appliance, the full package at an affordable price.

Exceptional performance for businesses & enterprises.

DEC3852 & DEC3862 with 4x 2.5GbE! 


Get your official

OPNsense® Certified™ appliance directly from the developers.

Say hello, to the Netboard A20 an AMD Epyc™ Embedded Mainboard at the heart of the OPNsense® security platform. With four independent Gpbs or 2.5Gbps (DEC3852 & DEC3862) Ethernet and two 10Gbps SFP+ ports, it is the ultimate performer in a small package.


With a depth of under 26cm (~10inch) it just fits in any cabinet.

Free one year OPNsense® Business Edition.

√ Commercial firmware repository
√ Free GeoIP database
√ Official OPNsense Open Virtualization Image
√ Free professional plugins (OPNcentral, Proxy Access)
√ Free E-Book ( English & German )

Full specifications & model comparison

Models DEC3842 DEC3852 DEC3862
Preinstalled software OPNsense®  OPNsense®  OPNsense® 
License Open Source + 1 year free Business
Open Source + 1 year free Business
Open Source + 1 year free Business
Hardware Specifications
SFP+ Ports [10Gbps] 2 2 2
GbE RJ45 Ports [ 10/100/1000Mbps ] / 2.5GbE [100/1000/2500Mbps] 4x GbE 4x 2.5GbE 4x 2.5GbE
USB 3.0 Ports 2 2 2
Console Port 1 1 1
Internal Storage 256GB M.2. Solid State Flash 256GB M.2. Solid State Flash 512GB M.2. Solid State Flash
Memory 8GB DDR4 16GB DDR4 32GB DDR4
CPU Cores 4 (max frequency 2.9Ghz) 8 (max frequency 3.1Ghz) 8 (max frequency 3.1Ghz)
Virtual Interfaces (802.1q VLANS)1 4093 4093 4093
System Performance
Firewall Throughput 14.4Gbps 17.4Gpbs 17.4Gpbs
Firewall Packets Per Second 1200Kpps 1450Kpps 1450Kpps
Firewall Port to Port Throughput 9Gbps 9Gpbs 9Gpbs
Firewall Port to Port Packets Per Second 1200Kpps 1450Kpps 1450Kpps
Concurrent Sessions 7000000 15000000 31000000
New Connections Per Second 50000 50000 50000
Firewall Latency (average) 100us 100us 100us
Firewall Policies (Recommended Maximum)1 10000 10000 10000
IPsec VPN Throughput (AES256GCM16) 2.3Gbps 2.5Gbps 2.5Gbps
IPsec VPN Packet Per Second (AES256GCM16) 200Kpps 220Kpps 220Kpps
Threat Protection Throughput Packet Per Second 163Kpps 163Kpps 163Kpps
Threat Protection Throughput ~2Gpbs ~2Gbps ~2Gbps
High Availability with State Synchronisation Requires Two Requires Two Requires Two
Height x Width x Depth (mm) 43.65 (1U) x 482.6 (19") x 282 (259 excl. panel) 43.65 (1U) x 482.6 (19") x 282 (259 excl. panel) 43.65 (1U) x 482.6 (19") x 282 (259 excl. panel)
Height x Width x Length (inches) 1.72 x 19 x 11.1 (10.2 excl. panel) 1.72 x 19 x 11.1 (10.2 excl. panel) 1.72 x 19 x 11.1 (10.2 excl. panel)
Form Factor 19" Rackmountable 19" Rackmountable 19" Rackmountable
Weight (appliance only) 3.45Kg  3.45 Kg  3.45 Kg 
Power Requirements 100-240VAC, 50-60Hz 100-240VAC, 50-60Hz 100-240VAC, 50-60Hz
Maximum Current 2.2A 2.2A 2.2A
Power Consumption (Typical) 40W  45W 45W
Heat Dissipation 136.5 BTU/hr 153.6 BTU/hr 153.6 BTU/hr
Operating Temperature 0 to +50°C 0 to +50°C 0 to +50°C
Storage Temperature -20 to +70°C -20 to +70°C -20 to +70°C
Humidity 10-90% non-condensing 10-90% non-condensing 10-90% non-condensing
Regulatory Compliance
FCC part 15 Class A, CE, Rohs FCC part 15 Class A, CE, Rohs FCC part 15 Class A, CE, Rohs

1 The user interface is designed for normal business usage, large rulesets, high number of users or interface assignments may be less practical.

All measurements are based upon TCP traffic unless stated otherwise. Total Firewall Throughput is calculated based on maximum PPS and standard 1500 byte packets. Maximum PPS is measured using 500 byte packets. IPS performance is measured using ET Open and standard 1500 byte package size. SSL VPN is measured using AES256GCM16+SHA512. Concurrent sessions are based upon memory available, where one state consumes 1KB of memory and 1GB of memory is reserved for system tasks. Latency is measured as an average over 60 seconds.

Supported SFP(+) Modules

When using SFP+Modules, do not mix 2.5/5Gbps and 10Gbps link-speed as the hardware does not support mixing these due to different frequencies.

While most standard LC-LC OM3 SFP+ modules and SFP+ Direct Attached Cables are likely to function we advise to select one of of the known compliant modules from the following list:

SFP+ (Up to 10G)



  •  [FIBER - SR] UP-TR-SR-CI 10G SFP+ 850nm 300m DOM  (Uptimed)
  •  [DAC] ARUBA 10G SFP+ 1m DAC  (Aruba)
  •  [DAC] CISCO SFP-H10GB-CU1M 1m Direct Attach  (Cisco)
  •  [FIBER - LR] SFP-10GLR-31 1/10G SFP+ 1310nm 10km  (FS)
  •  [FIBER - SR] SFP-10GSR-85 10G SFP+ 850nm 300m  (FS)
  •  [DAC] STARTECH DACSFP10G1M (Startech)
  •  [DAC] SFPP-PC02 10G SFP+ DAC 2M (FS)
  •  [DAC] SFPP-PC005 10G SFP+ DAC 0.5M  (FS)
  •  [RJ45] SFP-10G-T 10GBASE-T SFP+ 30m  (FS)
  •  [FIBER - SR] IBM FTLX8571D3BCL-IC 850nm
  •  [FIBER - SR] UBIQUITI UF-MM-10G 300m 850nm
  •  [FIBER-SR] Mellanox MFM1T01A-SR (Mellanox)

SFP (Up to 1G)



  • [RJ45] SFP-GB-GE-T 10/100/1000BASE-T SFP 100m TESTED WITH S/N: F1940333300 (FS)
  • [FIBER - LR BiDi] SFP-GE-BX 1000BASE SFP 1310/1490 10Km (FS)
  • [FIBER - LR BiDi] SFP-GE-BX 1000BASE SFP 1490/1310 10Km (FS)