Serious performance issue

RouterOS General
1

Hi all.
I have a dual core opteron K8 at 1.6GHz serving about 500 pppoe customers and giving them a 100Mb (total) internet link
I configured my ROS 3.30 with about 50 pppoe servers listening each one on a different vlan.
Every pppoe server use a profile with encryption and “change tcp MSS” set to yes
Nothing more, some simple firewall filter rules, a few nat rules and a lot of dynamic mangle rules due to “change tcp MSS” configuration (2 for each pppoe user).
PROBLEM:
My cpu consumption is near 90-95%!!!

Please point me in which direction I can investigate!
Can help me disable dynamic change of MSS and set a single static rule?

Many Thanks
Gianni

2

I had the same problem until I add mangle rule:
add action=change-mss chain=forward comment=“MTU 1360”
disabled=no new-mss=1360 passthrough=yes protocol=tcp tcp-flags=syn
tcp-mss=1361-65535

Also dont set change-tcp-mss=yes in ppp profile.

The problem is that mikrotik tries to change MSS for every frame, and not only for frames that are bigger than MSS you want to be, and CPU goes Up.
In my case I want MSS to be 1360 and my router sets this only for frames that are between 1361-65535. It helped me very much.

Please dont forget to give karma