Hi,
We bought 2 RB 2100UiAS-RM for site-to-site iSCSI replication over Fibre. The fibre ports are connected point-to-point and so far so good… the iSCSI networks were routed together over the fibre port.
However, we have hit a snag, in which the traffic is reaching only 250Mb/s over the fibre link until the CPUs get to 100%. We would also like to encrypt the data over the fibre (seeing that this essentially would pass over the ISPs routers), but whenever we tried site-to-site VPN over the fibre link (private network), the performance grounded to halt… only around 30Mb/s! before the CPU hits 100%.
IS the RB2100 not good enough to handle such traffic and would a RB1100 be better, seeing that it has IPsec acceleration and MTU sizes for jumbo framing support (over 9000)? Is there something that can be done to improve the performance (apart from overclocking the CPU, which I don’t want to do)?
Regards,
Vince
RB2011 series is much more like L3 switch than a real gigabit router.
RB1100AHx2 would do much better for that kind of traffic and CCR series
is even more powerful (but current version of software for CCR still has some problems).
With RB2011 you could try upgrade to latest 6.x version which should give it some performance improvements but don’t expect wonders.
The real solution is hardware upgrade to (at least) RB1100AHx2 model.
Here you compare their performances and features:
http://routerboard.com/RB2011UiAS-RM
http://routerboard.com/RB1100AHx2
http://routerboard.com/CCR1016-12G
http://routerboard.com/CCR1036-8G-2SplusEM
Regards,
M.
Thanks,
I forgot to mention that we were running 6.10 at the time of the question and were seeing such speeds.
What would you personally recommend? RB1100AHX2 or CCR?
Kind Regards,
Vince
As you mentioned the you want to encrypted the traffic i would go for the RB1100AHX2. It has hardware based acceleration for encryption.