CPU 100% uploading files to NAS

RouterOS General
1

Hello,

The file transfer through the Routerboard is 4 times slower when I directly connect to the switch between my laptop and my NAS.
When I copy a file the CPU of the RB is going full loaded to 100% (99%). When the copy is finished the CPU is going tot 15 - 25 %. (Winbox is open)

I think there’s a problem with my config with routing between the two VLAN’s? I have only created some firewall rules and if I disable them I have the same issue.


My configuration is a RB2011UiAS (Winbox → System → Routerboard: current firmware: 3.33) with a VLAN (different subnet) for my NAS and a VLAN (different subnet) for my computers and the internet. I use the fist 5 ports (1Gb) and all NIC’s a 1Gb.

2

Sure, when you route between networks on a slower device like the RB2011 you can easily overload it with fast traffic like a NAS.
Solutions:

  • make sure laptop and NAS are in the same VLAN so you get hardware switching instead of software routing
  • upgrade to a router that can route 1Gbps, e.g. a CCR1009 or RB3011.
3

NAS units have a tendency to rape router resources. My NAS has 4 Ethernet ports so I connected it to each network and have no issues with speeds as it is in each network and has no need to route.
This is where network design comes into play. Look at everything and try to keep the high throughput devices inside their LAN if possible. Otherwise upgrade the router to something that is capable of what you are asking it to do.

4

Do you use FastTrack? Depending on traffic to the Nas you will see high Cpu but using FastTrack is should be better. Also try upgrading to 6.39.3 and firmware with it.

Otherwise provide more info.

5

I thought that is was easy and not so hard for the RB to send data between the VLAN’s. :frowning:

If the ‘laptop’ and the NAS are in the same VLAN there’s a little performance improvement (a little)
through_same_vlan.png
through_a_second_vlan.png

I have add the fasttrack rules, but no ‘fast’ logging. (IP-settings)
fasttrack.png
ip-settings.png
Also updated the router
Firmware (Routerboard) 3.41
version: 6.40.5 (stable)
Factory Software: 6.35.1

If the performance can better than what I see, which information do you need? Or the RB cannot provide large data ?

Without the RB.
speedtest-network_same-switch.png

6

With NAS and laptop in the same subnet on the same switch (assuming you have not removed the master-port settings)
you should have maximal performance of the NAS with no CPU load on the MikroTik.
When the performance is still not what you would like, it is a NAS issue not a MikroTik issue.

7

Please post your firewall configuration so we can see the configuration regarding FastTrack. Once active it should give you a large bump in speed.

8

Perhaps I have removed that, how can I find that out?
It’s not the NAS, because if I remove the RB between the laptop en NAS its fast (see screenshots)

When I disable the IP-firewall in the bridge-settings Fasttrack will work, I see the difference if I disable the FW rule. But the most performance is to disable the IP-firewall in the bridge-settings. It’s 3 times faster than when I enable that function (and the CPU is not goning to the 100%). It looks like the firewall rules are still working.
bridge-settings-fw.png
So Fasttrack is working after the IP firewall in the bridge settings. And down- and upload through the VLAN are fast enough

9

It looks like you are using the bridge instead of the switch. Not good.

10

Ono, how can I fix that?

11

Set the master interface of ports ether3..5 to ether2.

12

I get an error, port already in bridge_VLAN100

Untitled.png
Untitled.png1591×826 81.2 KB

13

You should put your PC and NAS in the same subnet (same VLAN).
Also you should configure your VLANs on the switch, not on a bridge, for maximum performance.
I.e. you configure the appropriate VLANs in the switch menu and the memberships of the ports and the cpu port.
Commands are like this:

/interface ethernet switch port
set 4 default-vlan-id=6 vlan-header=always-strip vlan-mode=secure
/interface ethernet switch vlan
add independent-learning=no ports=switch1-cpu,ether4,ether5 vlan-id=6

On the master port (normally ether2) in the router you configure VLANs corresponding to what you configured on the master port.
Then all traffic within the same VLAN is entirely processed by the switch and you still can route traffic between VLANs.
However, when you route the traffic between PC and NAS (because they are in different VLANs) there will always be a performance penalty that you can try to minimize with tricks like fasttrack but it will never be completely gone.
Remember the RB2011 simply is not capable of routing a full gigabit. That is in the specs. It can switch a gigabit, not route.

14

Thank you for the answer.
I will not let operate the NAS, PC and the server in the same VLAN or subnet.
And I cannot connect the VLAN on port ether 7 and on port ether 5, because they are on a different internal CPU-switchs?

If I configure the VLAN 6 on ether1 and on ehter4 on the swicht, I can watch television so that will work. But then gets the TV receiver on ether4 his IP configuration of the DHCP-server of the ISP. But how is the configurtation if I have some NIC’s on a VLAN and they need and IP-config?
I thought (sample)

  • create interface bridge_vlan120
  • add IP-address 192.168.120.1/24 with network 192.168.120.0 on interface bridge_vlan120
  • create a DCHP-pool-120 (192.168.120.0/24) on interface bridge_vlan120
  • create vlan120 and set vlan on120 and connect to bridge_vlan120.
  • set ether4 and ether6 to bridge_vlan120.

All NICs on ehther4 and ether6 gets the IP-config from DHCP-pool-120.

15

Have you tested Disabling IP Firewall within a Bridge and create two bridges. I have several bridges and FastTrack works with that setup. So I do not have firewalls in a Bridge but between.