QoS before IPsec encrypting

RouterOS General
1

Hi all,

is it possible the have traffic prioritized before been encrypted ?

I will test this in a couple of days between RB750/Cisco, but I would like to know if someone has already experienced this ?


Regards.

2

You’re question is kind of broken in that it’s not nearly verbose enough. Try studying this diagram and then post again.

3

Ok,

I’ve read some docs about ipsec and packet flows using MT hardware.

I believe that I have to apply QoS using global-in virtual interface as user’s trafic can be prioritized before encryption process.
I will set up a queue tree config with global-in as parent.

Kindly let me know your thoughts about this strategy.

4

I’ve tested this with a RB750, CPU is 100% when sending 2mbps traffic
not sure QoS will work under theses conditions…

5

Yes, 2Mbps IPSEC max is about right for that router. You will start to get some additional latency and jitter even with queuing due to the high CPU usage. Try the RB1100AHx2 for more performance with encryption in IPSEC.