CCR1072-1G-8S+ throughput issue

We are seeing a problem with our CCR1072;s on 3 seperate networks now and was wondering if it was normal and we have the upgrade to CHR

Here is what I have a CCR1072

sfp1 = 10G link with HE.net
sfp2 = 10G link with DOCSIS network
sfp3-7 = N/C
sfp8 = 10G link to crs326-24g - Servers and Hosting

Here is what I am seeing

  • During peak hours we seem to limited on the sfp2 to ~2.5 to ~3Gps with 10G as the link speed
  • During same peak hours I can still do a Bandwidth test to another Tik on 10G through sfp1 for a 3-4Gbps (total 7-8Gbps with traffic from sfp2)
  • Modems behind sfp2 cannot get full speeds during peak hours even with plenty of room left on spf1.
  • We see 0 errors and 0 drops on all interfaces.
  • CCR1072 - CPU is max ~ 4 to 10%

What we have configured...

  • only firewall rules are block forwarding for an address list
  • No queues are setup (removed for testing)
  • 2 bridges, VPN and PUBLIC
  • Nat is only for VPN bridge
  • No mangle rules
  • only Routes besides default for
    /19 direct to sfp2 partner ip
    /24 direct to sfp8 local switch / servers
  • We have disabled wireless, hotspot . ipv6, mpls packages
  • Connection tracking is on (we use limited nat)
  • Connection count average is ~ 180000 max


    Our question is:
    Should a CCR1072 be able to forward more than 3Gbps given the above setup?
    The partner connected to spf2 states they are not QOSing or limiting us in any way. Yes as soon as we go past 2.5Gbps we start seeing dropouts and endusers do not get full bw.


    Regards
    -lw

Bump

what does the tool>profile indicate?

Are you running with IPv4 Fasttrack Active, not Fast Path. We found that helps a lot.
In IP settings we enable Allow FastPath but due to fw rules, that does not get used.
Added fw filter rule on forward chain with conn state est,rel Action fastrack connection

If you dont share the conf here (hide-sensitive) it is very hard to help you