Who use mikrotik in large networks please answer.

Task:

It is necessary to limit the speed of approximately 3000-4000 users.
Limitations in the speed different from 512 kbit up to 10 Mbit.
This means that the interface should be approximately 4000 rules of shaping.
At the same server is scheduled to run DNS, BGP, NAT.

Average Internet traffic 150-200 Mbit
Maximum - about 450 Mbit
About 100 000 active openings connections

If this can be realized by using Mikrotik, what hardware should be at least?
Thank you for your answers.

In is not smart to have shaping for 3000-4000 users on the same piece of hardware - you need to limit your client upload as close to client as possible, or else it will spam all the network with traffic that will eventually dropped by main router.

I suggest up to 500clients per main router (2 x /24 subnets).

http://forum.mikrotik.com/viewtopic.php ... 78#p141378 http://forum.mikrotik.com/viewtopic.php ... 28#p137128
http://forum.mikrotik.com/viewtopic.php?f=13&t=29211

Check these out. Check this one as well: http://forum.mikrotik.com/viewtopic.php?f=2&t=29587

http://forum.mikrotik.com/viewtopic.php ... 78#p141378 http://forum.mikrotik.com/viewtopic.php ... 28#p137128
http://forum.mikrotik.com/viewtopic.php?f=13&t=29211

Check these out. Check this one as well: http://forum.mikrotik.com/viewtopic.php?f=2&t=29587

Thanks for the links, but I am not asking how to limit speed.
I asked what hardware i need to use Mikrotik in my situation.

In is not smart to have shaping for 3000-4000 users on the same piece of hardware - you need to limit your client upload as close to client as possible, or else it will spam all the network with traffic that will eventually dropped by main router.

I suggest up to 500clients per main router (2 x /24 subnets).

Perhaps you're right.
I thought over this decision, but to discard it as not very favorable in terms of finance and administration.
Perhaps it is the only right decision when use PC routers.

But all the same I wish to hear the real information.
For example 500,1000 rules in shaper and what use hardware?

you are not worried about problems described by macgaiver, then you should choose to use PCQ, if there are different user classes, just make 1 queue for each class.

with 500 -1000 simple queue rules your latency will suffer compared to PCQ solution.

RB1000 would handle it rather effectively.

Macgaiver suggested a good idea to split the work load. I'd also suggest you use a separate router for BGP if you are running full tables. Think about RAID but with routers -- RAIR

Macgaiver suggested a good idea to split the work load. I'd also suggest you use a separate router for BGP if you are running full tables. Think about RAID but with routers -- RAIR

By the way, about the full table. RB/1000 will be able to withstand the full view of the two uplinks?

Another issue that worries me and a few other people whether delivery RB/1000 directly from Latvia?
As the yours official distributors of Mikrotik in the Ukraine do margin from 50% to 80%.
I think it very much.

Perhaps you're right.
I thought over this decision, but to discard it as not very favorable in terms of finance and administration.
Perhaps it is the only right decision when use PC routers.

Well, if administrated properly it is less problem than "all in 1 box" solution.

Common thing that I usually do with RB1000 is to prepare spare box with necessary configuration changes and then send an engineer simple to swap it with real one.
And, here you go - new configuration without even a 2min downtime. - Try to do it with all in one box

Decided to revert to the old topic.

TEST Mikrotik on PC

- CPU Intel ® Core ™ 2 Duo 3 GHz
- Intel LGA775 Platform
- Intel ® G33 chipset
- Dual-channel DDR2 1066 MHz * 1 Gb
- Flash Drive 8 Gb Speed 300h
Especially found two network cards "82572EI Gigabit Ethernet Controller"

Immediately put RouterOS 3.13 Level 4 (and then of course regret that the hurried)
And all this in a real network between the router and the BGP router.
In this interval the traffic has already been cut.

Traffic was about 150-170 Mbit creature is still working. While delays were up to 2-5 ms. CPU load - 24%.

Turned off shaper on both sides of MT. Bandwidth 350 Mbit, the number of connections is not more than 500 000. Router died at 2 seconds - and then came back. Ping on its network interface card, and through him to 8-30 ms + loss. Download CPU 30-35%

Added 2998 shaper rules. And 1800 of which approximately were used. Download CPU up to 80-90%. Ping 5-40 ms + big loss.

The quality of my Internet subscribers visually unchanged. Online gamers were shocked, it was impossible to play.

Shaper the incoming traffic does not reach the set value.
Removed Mitrotik - ping <1 ms.
Using ASPLinux.

How can this be?
It turns out that RouterOS - this is not a network operating system, but just "all in 1 box" solution for home use only?

I do not want in any way offend the product.
He likes me.
I have RouterBoard at home and I have no claim to it.
I want to make THIS work with a large bandwidth.
HOW?

P.S. I did not like the teachers of English in school.

3.13?.. why not latest version?..

Because the Intel PRO/1000 PT is works only at 3.13.
I try all versions MT - does not work.

And this is one of the few Intel network cards supported by Mikrotik.

Look this link http://forum.mikrotik.com/viewtopic.php ... 39#p144539

did you do what changeip say in the last post? http://forum.mikrotik.com/viewtopic.php ... 95#p144595

we have 1U server platforms - no problem with Intel NICs. but I even can't see any 'Unknown devices' on your screenshots in that topic...

No I have not wrote in support. Just did not have time.
With a network card issue decided. Installed 3.13 and upgraded to 3.25 - network cards work.
And if just install 3.25 - do not work.

Are you sure you XEN package was/is not enabled in one of the tries.

After updating felt a substantial difference.
There are two things.

1) When traffic at 350 Mbps, without shaping - ping a little more than 1-3 ms. Why?
2) In your personal experience - how best to cut traffic? I have a 6 unlimited packages. But! Without shaping ping is excellent, with shap - 50-80 ms in the absence of traffic. I think that too long a chain of rules?

Are you sure you XEN package was/is not enabled in one of the tries.

You talk about viVirtualization package?
I do not install it.