i have newly purchased ccr-1072 . But i am facing huge problem if i put a single firewall then cpu become 17 to 25.
if i work on bandwidth management cpu becomes 50 %. If i disable any firewall cpu become 80 to 85.
Please help me on that
72-p-2.jpg
72-p-2.jpg
Post image from “Tools → Profile” menu when this happens.
CCR 1072 cpu high if i put a single firewall or disable the firewall. please help me on that
cpu high 2.jpg
The amount of traffic in your screenshots are significant, also as soon as you create rule in firewall it automatically enables connection tracking (very expensive firewall process) , if it is enabled, it will start tracking connections and will not stop until last one of them are timed out.
If i use more firewall or add 50 to 100 simple queue or manage bandwith then cpu becomes more high. But if do same thing in my ccr-1036 nothing happening . I mean it not increasing cpu if i disable or enable firewall. i have more than 1487 simple queue. it nothing happening with ccr 1036.
post your resources cpu status at moment of high cpu usage, like this
cpu.jpg
72_1.jpg
please be more clear. you are talking about 1036 and showing pics of 1009. No traffic going through interface/firewall rules is shown.
Brother its ccr 1009 its not my one. Its not about ccr 1009 or 1036.
Its about ccr 1072. In my ccr-1072 if i put minimal firewall or manage bandwidth with simple queues. then cpu became
high. I have already given pic for that. Please give me a solution.
impressive cpu use!!!
whit this command you can see aggregate traffic, to know the total traffic passing through
traffic.jpg
Brother i am in big trouble . please somebody help me out.
72_100_2.jpg
can you plz check if any of the queue is being hit by dos attack or high pps. What is the rate of drop when traffic hits ur firewall rule. Queue wont be able to handle more than 1200kpps on 1072 to maxout the cpu. Correct me if I’m wrong
i agree
i think you are under dos attack
How could know that i am in dos attack? without queue and firewall its running fine . And If i use 1036 instead of 1072 its cpu 30 % only.
make a support file and send it to support. Please remember CCR wont be able to take heavy traffic on queues. There is already one post by me sometime last december showing it cannot handle heavy traffic(pps) on queues. Make a queue of around 500mb and send heavy udp 64b packet through that queue. Mikrotik ccr 1016 will maxout at just 300kpps.
http://forum.mikrotik.com/t/simple-queues-cannot-handle-high-packet-rates/84323/1
Single queue, really?? FYI It is limited to single core, and other 71 cores probable are busy waiting on that one.
Use many sinple queues and you will be fine
it was a ccr1016 not ccr1036
sorry it was 1016.
thns
We require mikrotik should involve to fix this problem. Its realy a big problem.
I have same problem 1036 30% cpu usage, same config in 1072 98% cpu usage 