CRS309 Port ingress rate - not working...

Have users on each port of a CRS309.. Want to be able to traffic shape the ports for the service they want.. example Port 1 = 150Mbps, Port 2 = 500Mbps..

It appears egress shaping is working, but ingress is far below the shaped value..

See part of config that sets the shaping..

Flags: I - invalid 
 #   NAME                SWITCH               INGRESS-RATE EGRESS-RATE STORM-RATE
 0   sfp1-core-switch    switch1                                               10
 1   sfp2                switch1                 158.0Mbps   158.0Mbps         10
 2   sfp3                switch1                 525.0Mbps   525.0Mbps         10
 3   sfp4                switch1                 158.0Mbps   158.0Mbps         10
 4   sfp5                switch1                 525.0Mbps   525.0Mbps         10
 5   sfp6                switch1                  55.0Mbps    55.0Mbps         10
 6   sfp7                switch1                                              100
 7   sfp8-castle         switch1                 525.0Mbps   525.0Mbps         10
 8   ether1              switch1                                              100
 9   switch1-cpu         switch1                                              1

Question is with sfp8.. this is a 10Gbps optic.. Am I asking for too much for the ingress policer to be able to handle incoming 10Gbps traffic and shape it to 525Mbps? It seems like the burst of traffic coming in is overwhelming the ingress port and it’s dropping packets to try and match the ingress policy, but it’s unable to (just too fast and furious coming in?)

egress shaping works great.. ingress shaping on 525Mbps produces around 250Mbps.

Did you already find a solution?
We have the same problem.

I have this problem using a CRS309, I haven’t tested it on other models.

6.47.4 it behaves like this, Ingress is sporadic and you have to play with it to try to get it to hit the target you want. Setting 100mbps pretty consistently gives 60mbps, but it does not scale in a linear way. Worse yet it is not consistent across different testing methods. The egress is always consistent.

6.48.beta58 ingress limiting is completely broken and does nothing, egress works.

7.1beta2 works pretty similar to 6.47.4, flaky ingress, egress is consistent.

I cannot seem to get simple queues to work to limit port speed either despite having followed every guide i could find. I’ve tried limiting individual ports, limiting the bridge, limiting my IP with the simple queue feature, none of it works. I have no firewall rules or fast track enabled, and have tried disabling “allow fast path” under /ip/settings. It seems like there’s no working bandwidth limitation for this device at all.

We have the same problem with different Mikrotik devices. Tested with RouterOS 6.4x and 7.x.
It looks like a software bug.. @Mikrotik please fix this problem finally - such a feature is essential.

I landed on this topic by google search :slight_smile:
I am looking the same problem.

On a hEX RB750Gr3 with ROS v7.9
I can perfectly adjust Switch → Port → ether5 → Egress Rate
But Ingress Rate cannot be adjusted, always too low whatever parameter i try.