10gb switch saturation problem

Hi, I’m trying to configure a 10Gbps FO trunk link with 4 VLANS, but I’m running into a saturation problem.

My two devices are:

  • “Router”: CRS328-24P-4S+
  • “Switch”: CRS310-8G+2S+

I have them connected to each other by SFP+ and FO with these adapters and with this type of fiber

  • “SFP+ to FO”: XS+85LC01D
  • LC/UPC to LC/UPC 1m OM4 (Multimode)

To test the failure in minimum configuration, I have programmed them like this

The “Router” has a fixed IP and emits a DHCP server

My problem, as seen in the image, when trying to perform a speed test from the “Switch” to the “Router”, it marks the latter as 100% CPU load, a speed of ~400mbps (in 10Gbps interface) and it marks between 700 and 2500 packet loss
imagen_2024-10-30_071939947.png
Does anyone know what could be happening?

It should be noted that I have performed the same test by UTP-Cat6E and I have the same speed but with a little less loss (1Gbps instead of 10Gbps)

Here is my configuration:

////////// router //////////

[admin@MikroTik] > export
# 1970-01-02 00:17:27 by RouterOS 7.12.1
# software id = CLLU-3CNI
#
# model = CRS328-24P-4S+
# serial number = HFK09C4M3S2
/interface bridge
add name=bridge1
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/ip pool
add name=dhcp_pool0 ranges=10.0.0.2-10.0.0.5
/ip dhcp-server
add address-pool=dhcp_pool0 interface=bridge1 name=dhcp1
/port
set 0 name=serial0
/interface bridge port
add bridge=bridge1 interface=sfp-sfpplus1
/ip address
add address=10.0.0.1/16 interface=bridge1 network=10.0.0.0
/ip dhcp-server network
add address=10.0.0.0/16 dns-server=1.1.1.1 gateway=10.0.0.1
/system note
set show-at-login=no
/system routerboard settings
set boot-os=router-os enter-setup-on=delete-key
[admin@MikroTik] >

////////// switch //////////

[admin@MikroTik] > export
# 1970-01-02 00:08:38 by RouterOS 7.11.3
# software id = VB2M-INWC
#
# model = CRS310-8G+2S+
# serial number = HFH0942MZC7
/interface bridge
add name=bridge1
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/interface bridge port
add bridge=bridge1 interface=ether1
add bridge=bridge1 interface=sfp-sfpplus1
/ip dhcp-client
add interface=bridge1
/system note
set show-at-login=no
/system routerboard settings
set boot-os=router-os
[admin@MikroTik] >

You’re most likely saturating cpu on one or both devices.
Never test ON the device to be tested. Test THROUGH the device.

btest itself consumes CPU to generate traffic. Use iperf on devices connected to switch instead.

Hello, I found a post in another forum that talked about CPU saturation. Apparently, when the packets leave the CPU and it saturates with less load than the dedicated SW processor, it never achieves the desired result.

Perform a test with iperf3 and the available equipment at 1Gbps (3+3 on LAN + 1 to a server in the cloud)

I have made sure that my link supports at least 3.5Gbps of access, for me more than enough (probably it will reach 10Gbps but I don’t have enough equipment to test it right now)

With the tests, the router’s CPU did not exceed 20% continuous load (the LAN requests jumped between VLANs)

I consider the question resolved, thanks for answering :slight_smile: