Each router has a ISP BGP connection and each routers has a connection to VLAN Internet.
eBGP to ISP and iBGP over Internet.
On the internet vlan I have a fw it routers via DGW. the DGW is handled by the routers using a VRRP on the Internet vlan.
lets say C has the VRRP now.
lets say my example prefix i’m looking at i 8.8.8.0/24 and it routes via router A.
If I disable the BGP peer on router A. My advertised prefixes are removed from router A, ISP route table and slowly inbound filters down.
But the ASA → VRRP via router C, which sends it to router A, router A no longer has the route and sends it to router B,C,D which in turns sends it back to router A.
So the loop begins.
It seems to take 3 min to get tge BGP to converge between router A and B,C,D.
Mikrotik’s BGP is single threaded and runs only on one CPU core. It is extremely slow - especially with things like updates/withdraws. You’re not the only one with issues like this, trust me.
If convergence time is a concern, I’d suggest you look at other routers TBH.
It’s typically due to better clock speeds on a single core for a VM since the process is still confined to a single core. The Tilera family of processors is optimized to move packets. BGP has a heavy computational load with large route tables and so Intel x86 chipsets are able the chew through the data much faster.
Truly a sad predicament that MT then leaves us in… Considering that 1) CCR is marketed as the “flagship” product, the holy grail, the mother of all routers - apparently, and 2) that MT is slowly but surely caning x86 support in preference for CHR (which would now include ADDITIONAL costs, as ESXi and a lot of virtual platforms needs to be licensed as well). Given the lack of VMWare-tools and other requirements on the CHR platform, that too, is not really a usable / production ready product (MT can’t even be bothered to make a proper installation system).
So, MT… What exactly are we supposed to be using then? And PLEASE don’t say to wait for the “non-existent” release of v7. Even IF v7 is released tomorrow, it will take at least a year before it is production ready in terms of bugs and stability.