I don't understand the logic behind dual PSU's that aren't hot-swappable.looks like a new revision of ccr1036 is coming soon
with dual PSU
RP filter in this case doesn't make any difference. But route cache does.
With disabled route cache:
blackhole = 4.45Mil pps
raw drop = 4.2Mil pps
Hi mrz,I would suggest to use raw firewall rules to drop DDOS packets.
/ip firewall filter add action=accept chain=forward connection-state=established,related
Does Miro honestly not stock them? What about Scoop, they sell Mikrotik hardware.Yes, I'm not disputing that they CAN get them. The point is they WONT get them. Fundamental difference between the two