100% CPU usage when copying files.

[ErfanDL]

Hi friends. when I copying and transferring files in my network, consumption of the processor up to 100%
is any idea ?

thanks

[sindy]

If the file transfer goes between devices in different IP subnets of your network, so the Mikrotik has to route the data, and the devices are connected directly using Ethernet, the CPU of your device may be too weak to deal with the traffic volume which is not throtlled by anything else.

If the devices are in the same IP subnet but you don’t use HW offloading on the bridge between the ports to which the devices are connected, the same happens.

If you use encryption, the CPU spends a lot of time on it unless it is one of those supporting hardware encryption and you’ve chosen one of the encryption algorithms supported in hardware.

So your configuration, the actual interface speed negotiated, and the model of your Routerboard all play a role. Post ****

/export hide-sensitive

including the header which reveals the routerboard model, indicate the ports between which the file transfer takes place and their link speeds negotiated if you cannot resolve it yourself. Don’t forget to obfuscate public IP addresses before posting.

[ErfanDL]

If the file transfer goes between devices in different IP subnets of your network, so the Mikrotik has to route the data, and the devices are connected directly using Ethernet, the CPU of your device may be too weak to deal with the traffic volume which is not throtlled by anything else.

If the devices are in the same IP subnet but you don’t use HW offloading on the bridge between the ports to which the devices are connected, the same happens.

If you use encryption, the CPU spends a lot of time on it unless it is one of those supporting hardware encryption and you’ve chosen one of the encryption algorithms supported in hardware.

So your configuration, the actual interface speed negotiated, and the model of your Routerboard all play a role. Post ****

/export hide-sensitive

including the header which reveals the routerboard model, indicate the ports between which the file transfer takes place and their link speeds negotiated if you cannot resolve it yourself. Don’t forget to obfuscate public IP addresses before posting.

thanks for reply.
I don’t use bridge on my router. transferring files between wifi and lan network with different IP address.

[sindy]

I don’t use bridge on my router. transferring files between wifi and lan network with different IP address.

So the wireless clients are in one IP subnet and the wired clients in another one, right? In this case, the packets between them are routed. If the wireless and wired clients were in the same IP subnet, there would have to be a bridge between the two, otherwise it would not work at all.

So now the question only remains whether your couldn’t optimize your firewall rules to save some CPU on routing between the two LANs. If not, you’ll simply need a bigger hammer to deal with the traffic volume.

[ErfanDL]

@sindy

I don’t use bridge on my router. transferring files between wifi and lan network with different IP address.

So the wireless clients are in one IP subnet and the wired clients in another one, right? In this case, the packets between them are routed. If the wireless and wired clients were in the same IP subnet, there would have to be a bridge between the two, otherwise it would not work at all.

So now the question only remains whether your couldn’t optimize your firewall rules to save some CPU on routing between the two LANs. If not, you’ll simply need a bigger hammer to deal with the traffic volume.

Yes thats right wifi and wire in different subnets.
How to optimize firewall rules? do you mean adding fasttrack to my firewall? if yes, Im doing but other firewall rules cannot be working.

Sent from my C6833 using Tapatalk

[sindy]

How to optimize firewall rules?

Hard to say as I haven’t seen them So everything below is a generic advice which may or may not apply to your case.

do you mean adding fasttrack to my firewall? if yes, Im doing but other firewall rules cannot be working.

Leaving fasttrack aside, suboptimal configurations may still exist, like inspecting every packet for many attributes where ****

action=accept connection-state=established,related

as the first rule in the chain would be sufficient (I cannot imagine a situation where it wouldn’t)
And in many cases it is possible for fasttrack to coexist with routing profiles - if you mark only minority kinds of traffic and let the most bandwidth-intensive traffic be handled by the default routing table, you may permit the non-marked traffic to be fasttracked.
I assume you do not need to prioritize the traffic between LANs.