10 Gbps (unencrypted) is possible in EoIP (and 7.5 Gbps of encrypted EoIP over IPSEC) !!!
Details below:
10 Gbps (unencrypted) is possible in EoIP (and 7.5 Gbps of encrypted EoIP over IPSEC) !!!
Details below:
very nice test!!!
about the topology:
who equipment was a terminator for the eoip or eoip over ipsec tunnel or tunnels??
how many tcp connections are established for the test??
Thanks Chechito!
Here is the network diagram:

We used both of the CCR1036-8G-2S+ to terminate the EoIP tunnels with the 1072 routing between them. Then we connected the 1036’s to our ESXi server at 10 gig each to be able to push a full 10 Gbps from end to end.
Here is a brief overview of how many TCP streams we used.
10 Gig unencrypted (9000 MTU) - Minimum of 2 to get max throughput.
7.5 Gig IPSEC encrypted (9000 MTU) - Minimum of 4 to get max throughput.
6.4 Gig unencrypted (1500 MTU) - Minimum of 10 to get max throughput.
1.7 Gig IPSEC encrypted (1500 MTU) - Minimum of 25 to get max throughput.
If you spend a lot of time tweaking the TCP buffers, window size, etc, you might be able to get it done with fewer streams. We didn’t really spend much time messing with those for this test.
thx for your reply
very interesting
that means this test proves ccr1036 performance not ccr1072, ccr1072 its only passing the traffic
just another questions:
the cpu sage was 100% on all cores??
which settings of ipsec sa proposal do you use (default is sha1 aes-128)??
Please make a PPPoE test so we can see if it is possible to use 1072 as an access concentrator.
its a good idea
they have announced that test and another more
i think seen this test you can get some idea of pppoe performance, eoip even without ipsec its more demanding than pppoe
of course firewall, nat, mangle an queues are the most demanding features and is impossible to recreate every possible scenario
We are definitely working on the PPPoE tests…we have had a VERY positive response from the MikroTIk community to the testing we are doing and so we are trying to prioritize all the requests that have come in for the CCR1072 ![]()
Will let you guys know when we get close to publishing results. ![]()
Just to give you a little preview of our PPPoE testing going on right now…

30,000 PPPoE connections with 30,000 simple queues so far. We are working on a post for stubarea51.net and will share details and testing setup very soon.
![]()
![]()
It actually wasn’t too high…I think we never saw it go above 10% and was usually 3 to 4 % on average.
IPSec settings used were the default when using the ipsec key in EoIP which is sha1 / aes128.
Can RouterOS installed on VMWare machine provide the same performance? If it can do this, what is the hardware requirements?