3 WAN PCC Load Balancing High CPU Usage

RouterOS General
1

Hi all, I’m new to this forum…i would like to ask problem that I encounter, I am using rb750 r2

I have 3 Unequal WAN Connection here it is :
WAN 1 = 30M down / 7M up
WAN 2 = 20M down / 7M up
WAN 3 = 10M down / 10M up

I setup PCC load balancing like this :
PCC 6/0 = WAN 1
PCC 6/1 = WAN 2
PCC 6/2 = WAN 3
PCC 6/3 = WAN 1
PCC 6/4 = WAN 2
PCC 6/5 = WAN 1

I have 90 computers connected to the network but only about 30 - 40 computers are active internet user, the rest are connected for file sharing purpose and some light browsing sometime. I notice that my CPU usage is very high even if I’m not using the full bandwidth at those 3 WAN Connection, my question is do i need to upgrade my router to a better one? or rb750 r2 is enough to do this job? I’m thinking of rb2011 or 3011. Here is the screenshot

2

Maybe some inefficient firewall rules or their order may be the cause.

3

Hi

You’re not using FastTrack as you need mangling to assign traffic to WANs. Looking at your CPU profiler data, firewall is the hotspot, followed by queuing.
You could try to optimise your firewall rules:

  • use connection markings in input/forward/output
  • mark packets on relevant interfaces only: so WANs for LoadBalacing, marking for interfaces with queues defined

If that doesn’t help, then indeed new hardware is the solution.

4

Hi, thanks for the reply…I use firewall for load balancing only…no extr rule and I still don’t understand how fasttrack works to be honest

5

you need to setup PCC load balancing like this :
PCC 6/0 = WAN 1
PCC 6/1 = WAN 2
PCC 6/2 = WAN 1
PCC 6/3 = WAN 2
PCC 6/4 = WAN 3
PCC 6/5 = WAN 1

or

PCC 6/0 = WAN 1
PCC 6/1 = WAN 1
PCC 6/2 = WAN 2
PCC 6/3 = WAN 2
PCC 6/4 = WAN 3
PCC 6/5 = WAN 1

or

PCC 3/0 = WAN 1
PCC 3/1 = WAN 2
PCC 3/2 = WAN 3

try all of them and what is good for you

6

please share your load balancing script . unequal

7

Fastrack cannot be used with mangling, if one is going to use fastrack one has to narrow down its usage to non-mangled packets only. Not sure how to accomplish that if its possible.