i would like to changemy bgp router ccr1072 with a xeon server because when i have ddos attack cpu go to 100% and I loss packets.
there is a pci that mikrotik support for have at least 4x 10G ports?
I have pretty much same problem with you before but I have found out that when you drop attack traffic with IP > Firewall > Raw CPU will come down and not having loss.
And I have use x86 RouterOS on Xeon E3 with Intel X520 before and still have problem when under attack.
Software router with small packets (especially attack traffic) are not going well. My advice is getting wire speed L3 switch with BGP. or Try use dst-limit to limit pps per IP.