If you mean a hardware router perhaps you mean embedded. Every router essentially is just a peace of hardware with storage that has an OS installed, usually linux based. If you knew the information me and other experts here know you would find there is no such thing as a true hardware router. What you're saying is that you want embedded where everything is soldered onto the board including CPU.
There are embedded x86 boxes too, some for as low as £100 for 3 ethernet ports but they use realtek and a slow AMD CPU.
Mikrotik CCR1009 has the hardware to handle multiple gigabits of NAT doesnt matter which direction. Mikrotik is very flexible in that any port can be WAN or LAN just like if you use ubiquiti or an x86 PC. All that matters is how you configure it as you can make rules using so many different things from port/interface, protocols/traffic type/mark or even address based whether layer 2 or 3 or layer 7. Mikrotik CCR1009 has been benchmarked to handle 5Gb/s of NAT using no hardware acceleration whatsoever even though hardware acceleration exists on mikrotik in a very flexible way. Some users on this forum have gotten 500Mb/s on CCR1009 maxing out only 1 out of 9 core using PPPOE, VLAN and many QoS and firewall rules with no acceleration.
The CCR1009 is designed in hardware to be a router but that doesnt mean you cant hack it to install openwrt on it or other things to use it as a regular linux server
. Facebook uses the same CPU as that router but the 100 core variants as PCIe cards in their servers to do firewall and network stuff and run the webserver part of their site with data handled by the x86 bit.
The mikrotik demo doesnt let you configure, it just shows you what it looks like and what possibilities you can do. For bandwidth reporting there are various ways for it. You can view bandwidth without logging in if you use the graphing feature under tools as a graph (this has hourly, daily, monthly and yearly), if you actually look in the demo under interface -- stats that shows you realtime bandwidth information and stats including packets and link so you can see how unreliable your ISP's PPPOE server or line is which is also logged so you can see when it went down.
If you wish to view realtime stats for user you first have to catogarise the user's traffic for the user. Simplest way to do this is by creating passthrough firewall filter using 2 rules, each using the user's mac address as source/destination. Another way is by automatically authorising the user using radius or hotspot as to make it show up under interfaces or somewhere that lets you view realtime stats. Unlike ubiquiti it doesnt catogarise stats traffic, you have to create rules to isolate the traffic you want to identify in order to get their stats. You can however bind a device to an IP and add the IP addresses to a list and give it a name and use that name instead as your source/destination and go further to specify the source of traffic whether it is internet or LAN by using the in out interface on forwarding chain using source/destination address list, it takes a bit of logic to understand the potential of configurable firewalls as they dont use human readable terminologies.
Mikrotik however has their dude software which you can run the server only on multicore routerboards/x86. This adds networking functionalities (you wont need domotz or spiceworks with this).
There is no mikrotik routerboard that has less ports for the throughput you want. All their ARM, PPC and TILE based boards have many ports. The ARM routerboard is the qualcomm IPC8064 based platform so does 500Mb/s with no hardware acceleration atm (You can think that hardware as beta stage). PPC has been their solid platform for performance in the past outshined now by the TILE based routerboards. However unlike the CCRs you wont get many CPU connected interfaces, with the CCR1009 with SFP+ you get SFP+ on 2 models (modular 10G port CPU connected), SFP (modular 1.25G port CPU connected), 4 CPU connected 1Gb/s ethernet ports and 5 1Gb/s ethernet ports switched. If you dont use switched ports you get better results so just bridge and you can also do LACP with CPU connected ports better with support for RSTP if you bridge. Just think as the CCR1009 as having 1-2 SFP ports and 4 ethernet ports.
The CCR1009 with SFP+ has 2 GB of ram so while it may retail at $500 this is better because it has 2GB of ram. My CCR1036 uses 400MB of ram just on boot as it has 36 cores and a lot of parallelism going on and when my address lists ends up with a few hundred thousand entries it eats up 1GB of ram as i have dynamic rules that automatically blacklist, whitelist and label traffic including host detection as well so i can see whos on my network. The CCR1009 is a 9 core TILEGx TILERA CPU which is very much like a general purpose CPU. It has better logic performance than ARM but sucks at math performance so its bad for 3D graphics but like MIPS is optimised for networking. They come with hardware encryption for AES but with the CPU throughputs you can expect good VPN performance. Like PPC and x86 they suffer less performance loss when doing more complex things like adding more rules and overheads. Mikrotik however will let you create complex networks without punishing you like other routers do. You can assign multiple IP addresses with 1 DHCP client and 1 DHCP server to each interface and an interface can be physical or virtual in the router. Each interface can essentially be part of multiple networks simultaneously.
