I have not yet tried with routing, but NAT it seems capable of doing at least 2Gbit sustained without too much trouble. Maybe 35% CPU utilization. I do not have the equipment to test more. But if it can do NAT at those speeds I would expect it to be quite capable in routing only!

Does anybody know if SFP+ port supports also SFP modules (1,25gbps).
I would like to replace actual config (RB1100AHx2 + 2 gigabit media converters) with 1 CCR1009-8G-1S-1S+ and 2 SFP modules.

I might be wrong, but I don't believe the 10G SFP+ port supports 1.25G modules. Usually, when they do, the port will be labeled 1/10G, but the picture Quindor posted clearly only shows 10G on the SFP+ port. At this point, your best bet to get multiple SFP cages is the CCR1036-12G-4S

Does anybody know if SFP+ port supports also SFP modules (1,25gbps).
I would like to replace actual config (RB1100AHx2 + 2 gigabit media converters) with 1 CCR1009-8G-1S-1S+ and 2 SFP modules.

Hi mmigoro , MTK have noted that certain SFP+ routers are backwards compatible with SFP but requires it to be hard set on both sides to 1GB iirc.

http://forum.mikrotik.com/viewtopic.php?f=3&t=81079

Thanks for info.

I only have access to my side of the link, the other ends are at provider PoP's. So I guess I'm stuck with 1100AHx2...

Thanks for info.

I only have access to my side of the link, the other ends are at provider PoP's. So I guess I'm stuck with 1100AHx2...

You are paying for the link right? Just ask them to set it to the specified settings and they should?

I only have access to my side of the link, the other ends are at provider PoP's. So I guess I'm stuck with 1100AHx2...

If you're currently using 1100AHx2 with fiber-to-copper media converter, why not use that with the CCR1009 too ?

It's a waste to use an SFP+ for 1Gbps connection when it's capable of 10Gbps.

By replacing three devices with only one we figured we will have full power redundancy because two sfp's being powered by device itself (which in turn is dual-powered (even three as i understand)).

Does anybody know if SFP+ port supports also SFP modules (1,25gbps).
I would like to replace actual config (RB1100AHx2 + 2 gigabit media converters) with 1 CCR1009-8G-1S-1S+ and 2 SFP modules.

Perhaps this answer from @janisk will matching best this question.
Topic: CCR1036-8G-2S+ SFP Problems

Did anyone ever tried to use the smart card slot? i wonder if that slot really works.
Anyone knows a compatible card for that slot?

starting from RouterOS 6.13 PSU monitoring will be possible. Due to some technical difficulties this feature was delayed. Same will be true for CCR1016-12S-1S+

Monitoring of PSU has already been implemented?

RouterOS 6.18

Try in terminal:
/system healt print

It works

Thank you.

Per stats now published on http://routerboard.com/CCR1009-8G-1S-1Splus you can seemingly push close 12Gbps through it with large packets!

This must have been tested using the 10Gbit ports because even combining the 4 switch ports is 1Gbps to CPU + 4x1Gbps CPU ports = 5Gbps or 10Gbps in full-duplex. The SFP adds another 1Gbit. But the 10Gbit port is also direct CPU connected and thus adds a whopping 10Gbit or 20Gbit full-duplex!

So basically, this is a ~10Gbit* router. More realistic you should scale it in around 5Gbps* with having some filters or queues active and looking at different packet sizes. Very awesome for the price.

Combine the CCR1009-8G-1S-1S+ with a $29 10Gbps DAC cable to a CRS226-24G-2S+RM and you create 24 x 1Gbit ports with a 10Gbit uplink! And since the CRS226-24G-2S+RM has 2 x 10Gbit ports you can continue "stacking" them! All routable and everything 'wire-speed'.

*It all depends on your usage pattern

yup, and Tilera own evalution board with such CPU state - it rated for up to 10Gbps traffic(depend specific details of such) http://www.tilera.com/sites/default/fil ... 12_WEB.pdf
p.s.
i was dreamed bout putting CCR1009 even to my home. really Love CCR1009 performance
but after some experience with it - skipped idea. just too loud for HOME use and need something 1.5x or 2x smaller, preferably(like RB2011 case or bit bigger), but thats not so big deal as noise or dust concerns.
maybe later Mikrotik - release something with MASSIVE fully-pasive radiators for such CPU, instead of Turbine cooler(like Asus-branded beefy routers with Al-made radiator weighting hugreds of gramms )it will really put in home use.
because for 25W power disspipation its not impossible, yet. and future versions(28nm and 22nm transistors -made)would be even colder than now. and even with mild 30% downclock to 800Mhz it still about 10x faster than Rb2011 and just fine for Home use, then, even with 1Gbps subscriptions and complex config.

I just got my first Mikrotik (CCR1009-8G-1S-1S+). Have some previous experience with a cheaper device.

First issue, the Quicket menu via WebFig doesn't show any settings, all fields are empty. When I login via winbox, the quickset shows me the current configuration.
Second issue, the quickset menu in WebFig is showing Wireless settings although the wireless package is disabled.

I just got my first Mikrotik (CCR1009-8G-1S-1S+). Have some previous experience with a cheaper device.

First issue, the Quicket menu via WebFig doesn't show any settings, all fields are empty. When I login via winbox, the quickset shows me the current configuration.
Second issue, the quickset menu in WebFig is showing Wireless settings although the wireless package is disabled.

Have you tried to upgrade the CCR1009 to the newest version and see what that does?
Are you able to also check it inside of Winbox?
Wireless is disabled because the CCR1009 does not have Wireless?

Is this how the architecture looks?
Combining the various datasheets this is what I have come up with.
MT could you please confirm?

Is this how the architecture looks?
Combining the various datasheets this is what I have come up with.
MT could you please confirm?

Yes I believe that is correct! Nice drawing too, but, euhm, Mikrotik released their block diagram a while ago : http://i.mt.lv/routerboard/files/CCR100 ... 151432.pdf maybe you missed it.

official shematics - of course cooler it also had mention of flash, leds, reset, buzzer, serial port and even sd slot. and not also you forgot thats dual-sfp/sfp+ variation exist too.

Related to the fans inside I found this one here, perhaps you would take a short overview
if this can be interesting for you. Noiseblocker BlackSilent Pro Fan PM2

Hi all,

I justed registered to let you know, that I've installed these fans today. They seem to work perfectly - I don't see any differences in temperature and I don't hear a thing
Thanks for all the information you guys provided in this thread, helped a lot!

Related to the fans inside I found this one here, perhaps you would take a short overview
if this can be interesting for you. Noiseblocker BlackSilent Pro Fan PM2

Hi all,

I justed registered to let you know, that I've installed these fans today. They seem to work perfectly - I don't see any differences in temperature and I don't hear a thing
Thanks for all the information you guys provided in this thread, helped a lot!

Thanks for sharing this! i ordered two of them. Did they fit perfectly or do you have to made some changes to the case?

Thanks for sharing this! i ordered two of them. Did they fit perfectly or do you have to made some changes to the case?

They fit perfectly. No changes to the case or fans necessary. The package contains a gasket for vibration-free mounting - I didn't try to install them.

I got the new Fan's today and installed them. As je1to mentioned they fit perfectly.

The Original Chiefly Microtik running around 6000-6300 RPM and keeping the CPU at 53-54C.
The NB-BlackSilent Pro running at 4400-4600 RPM and keeping the CPU at 55-56C.

They take a little longer to spin up, after that typical squeeking noise (Fan controller?) on this CCR's, i hear a ticking noise from the new fan, looks like they need a little more power to come up. After another 20 seconds the Fan finaly spins up.

It takes around 5-10 Minutes and they run around 4400-4600 RPM. At that point, the Fan is very quite.

/system health> print
fan-mode: auto
use-fan: main
active-fan: main
cpu-overtemp-check: yes
cpu-overtemp-threshold: 100C
cpu-overtemp-startup-delay: 1m
voltage: 23.8V
current: 907mA
temperature: 31C
cpu-temperature: 55C
power-consumption: 21.6W
psu1-state: ok
psu2-state: fail
fan1-speed: 4481RPM

I can confirm that with MW-SX-MM-US (1.25gbps) on the spf+ 10gbe port it will link.
i will be doing some testing on thoughput shortly.

Hi, can I ask - I have CCR1009 as edge router with NAT.
I used Eth5 as WAN and Eth6 as LAN. But in high data load from customers - above 300Mbps, occurs high cpu usage of CCR up to 100% and traffic decerase to forexample 110Mbps and latency to internet is 100ms and higher. This is during 3-6s, then CPU goues back to 20%. And for a minute -two that repeats. Is my device bad or that config is wrong?
Thanks.

Hi, can I ask - I have CCR1009 as edge router with NAT.
I used Eth5 as WAN and Eth6 as LAN. But in high data load from customers - above 300Mbps, occurs high cpu usage of CCR up to 100% and traffic decerase to forexample 110Mbps and latency to internet is 100ms and higher. This is during 3-6s, then CPU goues back to 20%. And for a minute -two that repeats. Is my device bad or that config is wrong?
Thanks.

Do you have Mangle rules? Queues? What are you firewall rules?

Hi, can I ask - I have CCR1009 as edge router with NAT.
I used Eth5 as WAN and Eth6 as LAN. But in high data load from customers - above 300Mbps, occurs high cpu usage of CCR up to 100% and traffic decerase to forexample 110Mbps and latency to internet is 100ms and higher. This is during 3-6s, then CPU goues back to 20%. And for a minute -two that repeats. Is my device bad or that config is wrong?
Thanks.

Do you have Mangle rules? Queues? What are you firewall rules?

Simple Q cca 30x, firewall cca 70x, NaT 240x

Simple Q cca 30x, firewall cca 70x, NaT 240x

Could be as simple as the order of your rules.

Previous PC router goes permanently on 70% on CPU load (dual-core 2200MHz Pentium. And it has lower latency to internet and no such issue, during 4 years.

Previous PC router goes permanently on 70% on CPU load (dual-core 2200MHz Pentium. And it has lower latency to internet and no such issue, during 4 years.

Post your filter and mangle, when we can see what could be causing it.

What is the meaning of green and orange ethernet LED?

I have some new remote CCR1009 to configure. I asked operator to connect eth1 to LAN and eth8 to WAN, then connected by VPN there and made basic configuration. After reboot I lost connection - router is not responding even to WinBox discovery from LAN. Operator said eth1 had just green LED on and eth8 both green and orange LEDs lighting constantly. When he disconnected eth8, router was available again from LAN. I'd like to know what happened. Maybe it was not a good idea to connect special port 8 (with POE and boot) as WAN...

Today the router was connected to WAN by port 7 - it was working, but after reboot it is not accessible again, neither from LAN / WinBox discovery. What's wrong? Is this some incompatibility with Cisco switch? I am feeling like a fool when I need to ask remote operator to disconnect cable again and again

EDIT: After some more testing I found out that orange LED means probably gigabit. Problem I described is obviously not related to ports 7/8 (as I thought), but to switch - if the ports 1-4 are switched, bootloader will hang sometimes. It doesn't matter if there is Cisco or TP-Link device. I have created ticket and will solve this with MT support.

Can anybody confirm that there is a memtest option in RouterBOOT for the rack mountable CCR1009-8G-1S-1S+ and other CCRs?
I recently bought a CCR1009-8G-1S-1S+PC ( Awesome device), but I wasn't able to find the option to test RAM in the console while on RouterBOOT.

at max it is small office and Home-office (where noise is big problem

the CCR1009 has the power to run a medium sized ISP, so, I don't agree to the above.

I agree 100% with Normis, these products are ISP grade products.

I am not sure they are small business grade in the VPN area, with users frequently referring to slower performance compared to RB1100AH.

I am not sure they are small business grade in the VPN area, with users frequently referring to slower performance compared to RB1100AH.

My main office is 500/500 fiber, feeding three bunch offices each with 100/100 fiber. Each office has a CCR1009 with 2GB. They have no issue sustaining 95~100mbps throughput, saturating the branch fiber. The main office routinely sustains 300mbps out to the offices.

I am not sure they are small business grade in the VPN area, with users frequently referring to slower performance compared to RB1100AH.

My main office is 500/500 fiber, feeding three bunch offices each with 100/100 fiber. Each office has a CCR1009 with 2GB. They have no issue sustaining 95~100mbps throughput, saturating the branch fiber. The main office routinely sustains 300mbps out to the offices.

With what VPN configuration?

Ipsec, AES128-CBC, SHA1

I am not sure they are small business grade in the VPN area, with users frequently referring to slower performance compared to RB1100AH.

Well they are saying that it can handle a "lot more than 500Mbps" with the correct VPN config:

http://forum.mikrotik.com/viewtopic.php?f=3&t=87892

I'd like to buy this router but notice 1 thing. According to block diagram, it should be:
SFP = 1gbps line
SFP+ = 10gbps line
Eth1-4 = 1gbps switched line
Eth5 = 1gbps line
Eth6 = 1gbps line
Eth7 = 1gbps line
Eth8 = 1gbps line
Total: 16gbps line
Why performance test result capped to 12gbps? Any invisible shared line?

I believe it is testing method limitation, you have only 6Gbps that you can receive or send on other than SFP+ port. There is ports from where get 4 more Gbps so that you can send out 10G via SFP+, to do so you need additional configuration, and that will impact the performance and make it useless for comparison with other products, (with smaller packets and more configuration).

I am not sure they are small business grade in the VPN area, with users frequently referring to slower performance compared to RB1100AH.

Well they are saying that it can handle a "lot more than 500Mbps" with the correct VPN config:

http://forum.mikrotik.com/viewtopic.php?f=3&t=87892

MikroTik can confirm or deny this, but I believe the CCRs use the same IPSEC hardware chip which means the CCR1009 performance ought to be close to the other CCRs.

We were able to get a max of 7.5 Gbps of encrypted throughput using EoIP over IPSEC in our testing of the CCR1036s.

http://www.stubarea51.net/2015/10/16/10 ... ip-tunnel/

I am not sure they are small business grade in the VPN area, with users frequently referring to slower performance compared to RB1100AH.

Well they are saying that it can handle a "lot more than 500Mbps" with the correct VPN config:

http://forum.mikrotik.com/viewtopic.php?f=3&t=87892

MikroTik can confirm or deny this, but I believe the CCRs use the same IPSEC hardware chip which means the CCR1009 performance ought to be close to the other CCRs.

We were able to get a max of 7.5 Gbps of encrypted throughput using EoIP over IPSEC in our testing of the CCR1036s.

http://www.stubarea51.net/2015/10/16/10 ... ip-tunnel/

according ezchip website the MiCA™ acceleration engines responsible for crypto acceleration have the following theoretical performance:

tilegx9 (ccr1009) 10Gbps of crypto and 5Gbps of compression
tilegx16 (ccr1016) 20Gbps of crypto and 10Gbps of compression
tilegx36 (ccr1036) 40Gbps of crypto and 20Gbps of compression
tilegx72 (ccr1072) 40Gbps of crypto and 20Gbps of compression

off course we have to take in count cpu and memory performance and the complexity of configuration

according ezchip website the MiCA™ acceleration engines responsible for crypto acceleration have the following theoretical performance:

tilegx9 (ccr1009) 10Gbps of crypto and 5Gbps of compression
tilegx16 (ccr1016) 20Gbps of crypto and 10Gbps of compression
tilegx36 (ccr1036) 40Gbps of crypto and 20Gbps of compression
tilegx72 (ccr1072) 40Gbps of crypto and 20Gbps of compression

off course we have to take in count cpu and memory performance and the complexity of configuration

Very helpful info! I've looked several times but never saw which chip was being used for IPSEC offload on the CCR. Just out of curiosity, where did you find the info on what chip is in the CCRs?

according ezchip website the MiCA™ acceleration engines responsible for crypto acceleration have the following theoretical performance:

tilegx9 (ccr1009) 10Gbps of crypto and 5Gbps of compression
tilegx16 (ccr1016) 20Gbps of crypto and 10Gbps of compression
tilegx36 (ccr1036) 40Gbps of crypto and 20Gbps of compression
tilegx72 (ccr1072) 40Gbps of crypto and 20Gbps of compression

off course we have to take in count cpu and memory performance and the complexity of configuration

Very helpful info! I've looked several times but never saw which chip was being used for IPSEC offload on the CCR. Just out of curiosity, where did you find the info on what chip is in the CCRs?

this are the chip manufacturer links

http://www.tilera.com/products/?ezchip=585&spage=614
http://www.tilera.com/products/?ezchip=585&spage=636
http://www.tilera.com/products/?ezchip=585&spage=635
http://www.tilera.com/products/?ezchip=585&spage=621
http://www.tilera.com/products/?ezchip=585&spage=618

Funny story, since purchasing the CCR1009 I've only used it as a testing router and temporary router where I needed it. Today I ported my configuration from the RB2011 I was using to my CCR1009 and am using it as my home "production" router!

I did set the CPU down to 600Mhz which has made it so that the stock fans just turn off. Performance is still miles and leagues ahead of the RB2011.

The reason for the switching the routers? I've started using a PPTP VPN tunnel to redirect some traffic to another site and anything more then 40Mbit would cause the RB2011 CPU to hit max CPU load and it became noticeable with other stuff I was running through it. With the CCR1009, even using 600Mhz, no problems whatsoever and I've seen it hit 60MBit to 80Mbit without problem!

Awesome device!

Funny story, since purchasing the CCR1009 I've only used it as a testing router and temporary router where I needed it. Today I ported my configuration from the RB2011 I was using to my CCR1009 and am using it as my home "production" router!

I did set the CPU down to 600Mhz which has made it so that the stock fans just turn off. Performance is still miles and leagues ahead of the RB2011.

The reason for the switching the routers? I've started using a PPTP VPN tunnel to redirect some traffic to another site and anything more then 40Mbit would cause the RB2011 CPU to hit max CPU load and it became noticeable with other stuff I was running through it. With the CCR1009, even using 600Mhz, no problems whatsoever and I've seen it hit 60MBit to 80Mbit without problem!

Awesome device!

what cpu usage when hitting 80mbit of pptp?? in tool profile you see cores evenly charged??

what cpu usage when hitting 80mbit of pptp?? in tool profile you see cores evenly charged??

See for yourself. This was downloading about 16GB of data, I saw peaks up to 110Mbit but average was more around 60MBit. I have included a bandwith graph and 2 CPU graphs. One is of each CPU individually, one of them averaged together.

Not sure where the high peak value of one of cores came from, it also seems to be before I started the downloads. Generally speaking and monitoring the resources I did not see this spike and everything was evenly distributed over the cores with one of two hitting 20% at max.

And again, this is with the CCR1009 running at 600Mhz, so only using half of the power it actually has!

*Use the scrollbars within the picture to see the data in numbers.

thx for sharing the graphs

i have my ccr1009 PC at underclocked too at 400mhz to save some watts hehe

Hello,

is that 1009 model capable maintain 1 Gbit as edge router with NAT ?

Regards,
Darek