Page 1 of 1

CCR 1072 performance

Posted: Thu Nov 19, 2015 11:34 am
by aguntukk
i have newly purchased ccr-1072 . But i am facing huge problem if i put a single firewall then cpu become 17 to 25.

if i work on bandwidth management cpu becomes 50 %. If i disable any firewall cpu become 80 to 85.

Please help me on that
72-p-2.jpg
72-p-2.jpg

Re: CCR 1072 performance

Posted: Thu Nov 19, 2015 11:36 am
by normis
Post image from "Tools -> Profile" menu when this happens.

Re: CCR 1072 performance

Posted: Fri Nov 20, 2015 3:42 pm
by aguntukk
CCR 1072 cpu high if i put a single firewall or disable the firewall. please help me on that
cpu high 2.jpg

Re: CCR 1072 performance

Posted: Fri Nov 20, 2015 3:52 pm
by macgaiver
The amount of traffic in your screenshots are significant, also as soon as you create rule in firewall it automatically enables connection tracking (very expensive firewall process) , if it is enabled, it will start tracking connections and will not stop until last one of them are timed out.

Re: CCR 1072 performance

Posted: Fri Nov 20, 2015 4:21 pm
by aguntukk
The amount of traffic in your screenshots are significant, also as soon as you create rule in firewall it automatically enables connection tracking (very expensive firewall process) , if it is enabled, it will start tracking connections and will not stop until last one of them are timed out.

If i use more firewall or add 50 to 100 simple queue or manage bandwith then cpu becomes more high. But if do same thing in my ccr-1036 nothing happening . I mean it not increasing cpu if i disable or enable firewall. i have more than 1487 simple queue. it nothing happening with ccr 1036.

Re: CCR 1072 performance

Posted: Fri Nov 20, 2015 5:12 pm
by chechito
post your resources cpu status at moment of high cpu usage, like this
cpu.jpg

Re: CCR 1072 performance (cpu High)

Posted: Sat Nov 21, 2015 9:20 am
by aguntukk
72_1.jpg

Re: CCR 1072 performance

Posted: Sat Nov 21, 2015 12:58 pm
by hashbang
please be more clear. you are talking about 1036 and showing pics of 1009. No traffic going through interface/firewall rules is shown.

Re: CCR 1072 performance

Posted: Sat Nov 21, 2015 1:08 pm
by aguntukk
Brother its ccr 1009 its not my one. Its not about ccr 1009 or 1036.

Its about ccr 1072. In my ccr-1072 if i put minimal firewall or manage bandwidth with simple queues. then cpu became
high. I have already given pic for that. Please give me a solution.

Re: CCR 1072 performance

Posted: Sat Nov 21, 2015 3:07 pm
by chechito
impressive cpu use!!!!

whit this command you can see aggregate traffic, to know the total traffic passing through
traffic.jpg

Re: CCR 1072 performance

Posted: Sat Nov 21, 2015 4:37 pm
by aguntukk
Brother i am in big trouble . please somebody help me out.
72_100_2.jpg

Re: CCR 1072 performance

Posted: Sat Nov 21, 2015 6:30 pm
by hashbang
can you plz check if any of the queue is being hit by dos attack or high pps. What is the rate of drop when traffic hits ur firewall rule. Queue wont be able to handle more than 1200kpps on 1072 to maxout the cpu. Correct me if I'm wrong

Re: CCR 1072 performance

Posted: Sat Nov 21, 2015 6:45 pm
by chechito
i agree

i think you are under dos attack

Re: CCR 1072 performance

Posted: Sun Nov 22, 2015 5:56 am
by aguntukk
How could know that i am in dos attack? without queue and firewall its running fine . And If i use 1036 instead of 1072 its cpu 30 % only.

Re: CCR 1072 performance

Posted: Sun Nov 22, 2015 8:51 am
by hashbang
make a support file and send it to support. Please remember CCR wont be able to take heavy traffic on queues. There is already one post by me sometime last december showing it cannot handle heavy traffic(pps) on queues. Make a queue of around 500mb and send heavy udp 64b packet through that queue. Mikrotik ccr 1016 will maxout at just 300kpps.

http://forum.mikrotik.com/viewtopic.php?t=92834

Re: CCR 1072 performance

Posted: Sun Nov 22, 2015 11:10 am
by macgaiver
Brother i am in big trouble . please somebody help me out.
72_100_2.jpg

Single queue, really?? FYI It is limited to single core, and other 71 cores probable are busy waiting on that one.
Use many sinple queues and you will be fine

Re: CCR 1072 performance

Posted: Sun Nov 22, 2015 9:08 pm
by chechito
make a support file and send it to support. Please remember CCR wont be able to take heavy traffic on queues. There is already one post by me sometime last december showing it cannot handle heavy traffic(pps) on queues. Make a queue of around 500mb and send heavy udp 64b packet through that queue. Mikrotik ccr 1036 will maxout at just 300kpps.

http://forum.mikrotik.com/viewtopic.php?t=92834
it was a ccr1016 not ccr1036

Re: CCR 1072 performance

Posted: Sun Nov 22, 2015 9:40 pm
by hashbang
sorry it was 1016.
thns

Re: CCR 1072 performance

Posted: Sat Dec 05, 2015 8:40 pm
by aguntukk
make a support file and send it to support. Please remember CCR wont be able to take heavy traffic on queues. There is already one post by me sometime last december showing it cannot handle heavy traffic(pps) on queues. Make a queue of around 500mb and send heavy udp 64b packet through that queue. Mikrotik ccr 1036 will maxout at just 300kpps.

http://forum.mikrotik.com/viewtopic.php?t=92834
We require mikrotik should involve to fix this problem. Its realy a big problem.

Re: CCR 1072 performance

Posted: Sat Oct 08, 2016 11:31 pm
by fr4
I have same problem 1036 30% cpu usage, same config in 1072 98% cpu usage :(

Re: CCR 1072 performance

Posted: Sun Jul 09, 2017 1:11 pm
by hasanmon786
Dear All,
We are using CCR 1072 last couple of month, OS 6.38.7 BW handling apx 6 G Bandwidth. Usually its cpu usages 20-60% but last couple of days having strange type problem. suddenly its get cpu usages 100% and by this time traffic fall down. nobody get internet. and we cant log in to server to see anything. Its just hanged. After rebooted it is working fine like normal. We couldn't find any clue, If any body knows please give us solution. we are almost in trouble now. please give us feedback as soon as possible if anybody face that kind of problem and have solution.

Thanks in advance

Re: CCR 1072 performance

Posted: Mon Jul 10, 2017 10:37 am
by normis
Check Tool -> Profile menu to see what is using the CPU

Re: CCR 1072 performance

Posted: Mon Jul 10, 2017 12:28 pm
by p3rad0x
Hi, I have a similar issue, its not constantly 100 but it spikes when a ppp interface like l2tp tunnel disconnects.

If there is 30+ dc's then 100% and this causes others to dc and worsens the problem

Re: CCR 1072 performance

Posted: Mon Jul 10, 2017 1:14 pm
by normis
Did you check the Profile menu to see what is causing the CPU load?

Re: CCR 1072 performance

Posted: Mon Jul 17, 2017 12:53 am
by gustkiller
Having the same problem here with a 1036
Cpu goes 100% unable to make suppout file.

The profile shows 100% cpu firewall usage. Disabled NAT/Contrack and now the 100% cpu usage is from a PCQ queue.