Virtual MikroTik 6.** CPU Problem

RouterOS Beginner Basics
1

Hello, I bought Adv 3 from OVH and I want to use it for gaming. But since OVH’s own protection is insufficient, I decided to install MikroTik. I have 6Gbps internet speed, but when I do speed test and MikroTik is active, the speed is 500mbps and the cpu is directly 100%. When we try a few DDoS attacks, the attacks are blocked by MikroTik, but since it appears as 300Mbps, MikroTik CPU is 80%. Can I do something for this?

We have Bridge to get connect our VDS
Using MikroTik for FiveM server.

When Mikrotik is on but not active on VDS Cpu avarage is 30-40% but when is active cpu goes 80-90% and is make Packet loss and no one can play.

What we need to do?

Processor: AMD Ryzen 9 5900x - 24 Core for MikroTik
64Gb Ram
ESXi 6.7
MikroTik P10 Support - MikroTik v6.48.6 CHR

2

When Mikrotik is on but not active on VDS Cpu avarage is 30-40% but when is active cpu goes 80-90% and is make Packet loss and no one can play.

^ not VDS sorry, MikroTik cpu is 30-40%

3

Please post your configuration. Without that, we’re just guessing. To export and paste your configuration (and I’m assuming you are using WebFig or Winbox), open a terminal window, and type (without the quotes) “/export hide-sensitive file=any-filename-you-wish”. Then open the files section and right click on the filename you created and select download in order to download the file to your computer. It will be a text file with whatever name you saved to with an extension of .rsc. Suggest you then open the .rsc file in your favorite text editor and redact any sensitive information. Then in your message here, click the code display icon in the toolbar above the text entry (the code display icon is the 7th one from the left and looks like a square with a blob in the middle). Then paste the text from the file in between the two code words in brackets.

4 



# aug/23/2022 20:57:43 by RouterOS 6.48.6
# software id = 
#
#
#
/interface bridge
add name=bridge1
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/interface bridge port
add bridge=bridge1 interface=ether1
add bridge=bridge1 interface=ether2
/interface bridge settings
set use-ip-firewall=yes
/ip address
add address=5*******/24 interface=ether1 network=5*******
/ip dhcp-client
# DHCP client can not run on slave interface!
add disabled=no interface=ether1
/ip dns
set servers=8.8.8.8
/ip firewall address-list
add address=1******** list=fivem
/ip firewall filter
add action=add-src-to-address-list address-list=fivemtemiz \
    address-list-timeout=3m chain=forward content=CitizenFX dst-address-list=\
    fivem dst-port=30120 protocol=tcp
add action=add-src-to-address-list address-list=fivemtemiz \
    address-list-timeout=3m chain=forward dst-address-list=fivem dst-limit=\
    2,2,src-and-dst-addresses/1m40s src-address-list=fivemtemiz
/ip firewall raw
add action=notrack chain=prerouting comment=No-Track
add action=drop chain=prerouting comment=Fivem-Koruma dst-address-list=fivem \
    dst-port=30120 protocol=udp src-address-list=!fivemtemiz
add action=accept chain=prerouting comment=Fivem-Temiz dst-address-list=fivem \
    dst-limit=9999,9999,src-and-dst-addresses/1m40s src-address-list=\
    fivemtemiz
add action=add-src-to-address-list address-list=ddos address-list-timeout=50s \
    chain=prerouting comment=Fivem-Temiz dst-address-list=fivem \
    src-address-list=fivemtemiz
add action=accept chain=prerouting comment=Genel-UDP dst-address-list=fivem \
    dst-limit=500,500,dst-address/1m40s protocol=udp src-address=8.8.8.8 \
    src-port=53
add action=accept chain=prerouting comment=Genel-UDP dst-address-list=fivem \
    dst-limit=500,500,dst-address/1m40s protocol=udp
add action=drop chain=prerouting comment=Genel-UDP dst-address-list=fivem \
    protocol=udp
add action=accept chain=prerouting comment=TCP-SYN-52 dst-address-list=fivem \
    dst-limit=50,50,dst-address/1m40s packet-size=52 protocol=tcp tcp-flags=\
    syn
add action=accept chain=prerouting comment=TCP-SYN-ALL dst-address-list=fivem \
    dst-limit=50,50,dst-address/1m40s protocol=tcp tcp-flags=syn
add action=drop chain=prerouting comment=TCP-SYN-DROP dst-address-list=fivem \
    protocol=tcp tcp-flags=syn
add action=accept chain=prerouting comment=TCP-RST dst-address-list=fivem \
    dst-limit=5,5,dst-address/1m40s protocol=tcp tcp-flags=rst
add action=drop chain=prerouting comment=TCP-RST dst-address-list=fivem \
    protocol=tcp tcp-flags=rst
add action=accept chain=prerouting comment=TCP-FIN dst-address-list=fivem \
    dst-limit=50,50,dst-address/1m40s protocol=tcp tcp-flags=fin
add action=drop chain=prerouting comment=TCP-FIN dst-address-list=fivem \
    protocol=tcp tcp-flags=fin
add action=drop chain=prerouting comment=ICMP-DROP dst-address-list=fivem \
    protocol=icmp
/ip route
add distance=1 gateway=57.*******
/system identity
set name=RouterOS