CPU 100% how can i reduce my 1200 mangle rules?

RouterOS General
1

Hi,

I think i have too many traffic on my Router, is it possible to switch from dynamic mss change rules to one static rule for all customer?
I will hope that the solution reduce my rx drops.

Thanks

It is ROS 5.07 with AMD Quad Core and intel e1000 card

2

Probably.

As you can imagine it is kind of hard to give a definitive answer without a couple of your rules, though. So post them.

3

Okay no Problem, i have 900 customers with pppoe on this Router and under Profile i have enable mss change. So i have ca. 1400 dynamic rules under IP firewall mangle. And now, i want to know if it possible to switch from dynamic rules to one static to reduce the cpu?

thanks a lot..

4

Again - yes, probably. Post the dynamic rules the router created so we can look at them and try to summarize them in just one rule. I don’t use PPPoE. Unless you copy and paste the specific rules the router made for you I cannot help you. 3 or 4 of them will suffice.

5

Swith off the “mss change” in Your profile, and add two static mangle rules for both directions, or a single one depending on Your needs.

/ip firewall mangle
add action=change-mss chain=forward comment="" disabled=no new-mss=1400 protocol=tcp tcp-flags=syn
6

Thanks, but i don`t understand what do you mean with “both directon” ? And why a mss change of 1400 and not 1440?

THANKS

7

I mean incoming and outgoing traffic which can be handled with a single mangle rule in some cases.

And why a mss change of 1400 and not 1440?

THANKS

1400 was an example.
Bigger packets are often getting lost in crappy wireless networks, small mss often helps to mask the problem :slight_smile: