I’ve been trying to make a transparent traffic shaper using MT. I’ve got a Core 2 Quad with 1 GB RAM system with 3 LAN cards using the Realtek RTL 8169 Gigabit LAN cards. I made a bridge interface, and added 2 ether ports to the bridge. I then “diverted” the local part of my core router pushing 50 Mbps link through this Traffic Shaper.
I put this on test at first, without adding any rules on IP Firewall or anywhere else, and put it on for a test run. It ran well for 5 - 6 hours, then the Traffic Shaper would simple “crash”. No display, no keyboard response, nothing. It just freezes.
I firs blamed the mobo, and changed it to Intel manufactured one, and still I’ve got the same problem.
Thank you for your suggestions. We’re in an early weekend session right now. We’ll come to office again on Saturday, and try without bridge. Takes almost 5 - 6 hours before the problem occurs. Let’s hope it works!
Almost same problem with me and still find the cause.
I’m using Intel Quad Core on Asus mobo, RB44G running as bridge, transparent firewall, vlans and queue. System works as expected but not more than 2 days, it just crash and restart.
Log only shows “router was rebooted without proper shutdown”.
On the peak time traffic reaching 80Mbps and 30% of CPU usage but I don’t think that cause the problem since the crash can be happened at night.
I tried to use another PC with single core 3GHz Intel CPU using exacly same configuration, the problem does not exists, but the system slowdowns the traffic to unaccepted level. CPU usage up to 80%.
Another PC with same hardware config running as router (BGP), tunnels and VPNs on the same network never crash. I switch the hardware, the bridge one keep crashed.
I use ROS v3.13. I had tried v3.18 with the same behavior.
I have exactly the same issue..
Xeon Quad Core transparent traffic shaper (Ether1 and Ether2 bridged)
It works as intended then suddendly crashes and reboots
ROS 3.20
Looks like i addressed the issue in this mangle rule.. if i enable this, the router crashes after a while and reboots
/ip firewall mangle
chain=forward action=add-dst-to-address-list
src-address-list=IP dst-address-list=!IP
address-list=“P2P Address” address-list-timeout=5m
connection-mark=P2P-CONN
where IP are my pubblic ip addresses i redistribuite to customers
You are right, the problem is on the “action=add-dst-to-address-list”. I put any IP probing my mikrotik into a list, and it can be thousands.
since I disable the rule, it never restart anymore.