Hello folks.
I am requesting some help has i am being struggling with this since some weeks now and i am near to loose my mind…
So, here’s my cenario:
- I have a router CS1036-12G-4S with 2 uplinks (500Mbits on ETH2 and 100Mbits on ETH1) to different providers.
- I am running BGP to announce my IPs.
- The announced ranges are splitted in more tiny ranges and connected VLANs on to the fiber interfaces (SFP3 and SFP4).
- I have fastpath enabled and just 1-2 rules to block uncommon ports (UDP: 123,11211,3702,53,389) on firewall (This is a router, not a firewall, so… let router be a router).
- On my internal network i run servers (some are game servers) where the above ips are configured.
I created a simple queue for each vlan like this:
/queue simple add burst-limit=110M/110M burst-threshold=105M/105M burst-time=10s/10s disabled=yes max-limit=100M/100M name=Server1 queue=default/default target=srv01 total-queue=default
on the above, “srv01” is one of the vlans.
And here’s the queue type:
/queue type set 0 kind=pcq pcq-classifier=dst-address pcq-dst-address6-mask=64 pcq-limit=5120KiB pcq-src-address6-mask=64 pcq-total-limit=655360KiB
My actual problem: When a server get to 50-60Mbits of bandwidth consumption, services inside start to get packet loss and loose connection when reach 80Mbits (This is far bellow of the configured limits), and the global bandwidth consumption is around 300Mbits (So, there is no reason why there is packet loss). And when this happens, the CPU of the router goes 100% (when the normal is 8-12%). The profile window shows that the CPUs are being used by networking… How to know what in specific is doing this?? What rule/option/configuration?
What i want to do:
- I want to put the above limits (burst-limit=110M/110M burst-threshold=105M/105M burst-time=10s/10s max-limit=100M/100M) for every UDP connection without any packet loss (I guess the latency will increase, but i am not worried about that).
- i want to put the above same limits for every TCP connection with minimum latency.
So, someone can come with a working config?
I was avoiding to create several rules for each vlan interface (because i have like 30-40 configured), but if i have to create, i want to be sure that this will work.