I have a dedicated server that runs Hyper V, a bunch of VM's and a CHR (with legacy NICs) to manage the network's traffic.
The VM's behind the CHR can only attain about 16Mbps throughput and the CHR's CPU useage is pinned at 100% as shown here:
When i try to add a second vCPU to the CHR, it will boot as normal but not have an ethernet connection.
- Once i remove the second vCPU, it's back to normal.
- No other changes were made between adding and removing the vCPU.
- "Multi-CPU" is shown to be ENABLED in Winbox > System > Resources > Hardware
Here is my config:
Code: Select all
# nov/29/2016 09:56:14 by RouterOS 6.38rc24
# software id =
#
/interface ethernet
set [ find default-name=ether1 ] name=ether1-WAN
set [ find default-name=ether2 ] name=ether2-Jinternet
set [ find default-name=ether3 ] name=ether3-Production
/ip pool
add name=pool2_jinternet ranges=192.168.169.100-192.168.169.199
add name=pool1_production ranges=10.0.0.100-10.0.0.199
/ip dhcp-server
add address-pool=pool2_jinternet disabled=no interface=ether2-Jinternet name=\
dhcp1_jinternet
add address-pool=pool1_production disabled=no interface=ether3-Production \
name=dhcp1_production
/ip settings
set secure-redirects=no send-redirects=no
/ip address
add address=7.7.7.7 comment=Main interface=ether1-WAN network=\
1.1.1.1
add address=10.0.0.1/24 interface=ether3-Production network=10.0.0.0
add address=192.168.169.1/24 interface=ether2-Jinternet network=192.168.169.0
add address=6.6.6.6 comment=NET1_1 interface=ether1-WAN network=\
1.1.1.1
/ip dhcp-client
add disabled=no interface=ether1-WAN
/ip dhcp-server lease
add address=10.0.0.10 mac-address=00:50:56:05:CF:F7 server=dhcp1_production
add address=192.168.169.10 client-id=1:0:50:56:5:cf:f3 mac-address=\
00:50:56:05:CF:F3 server=dhcp1_jinternet
add address=10.0.0.20 mac-address=00:50:56:05:CF:F9 server=dhcp1_production
add address=192.168.169.50 mac-address=00:50:56:05:CF:FA server=\
dhcp1_jinternet
/ip dhcp-server network
add address=10.0.0.0/24 dns-server=10.0.0.1 gateway=10.0.0.1
add address=192.168.169.0/24 dns-server=192.168.169.1 gateway=192.168.169.1 \
netmask=24
/ip dns
set allow-remote-requests=yes servers=4.2.2.4,4.2.2.3,4.2.2.2,4.2.2.1
/ip firewall filter
add action=fasttrack-connection chain=input connection-state=\
established,related
add action=accept chain=input comment="Accept Established and Related" \
connection-state=established,related
add action=drop chain=forward comment="Drop Invalid Forward" \
connection-state=invalid
add action=drop chain=input comment="Drop Invalid Input" connection-state=\
invalid
add action=drop chain=output comment="Drop Invalid Output" connection-state=\
invalid
add action=drop chain=input comment="Drop Everything Input from WAN" \
in-interface=ether1-WAN
/ip firewall nat
add action=netmap chain=srcnat comment="netmap - kms outbound to NET1_IP_1" \
src-address=10.0.0.10 to-addresses=6.6.6.6
add action=netmap chain=srcnat comment="netmap - unifi outbound to NET1_IP_1" \
src-address=10.0.0.20 to-addresses=6.6.6.6
add action=dst-nat chain=dstnat comment="forward - kms" dst-address=\
6.6.6.6 dst-port=7411 protocol=tcp to-addresses=10.0.0.10
add action=dst-nat chain=dstnat comment="forward - unifi" dst-address=\
6.6.6.6 dst-port=8080,9080 protocol=tcp to-addresses=10.0.0.20
add action=dst-nat chain=dstnat comment=\
"forward - unifi web access from hv host" disabled=yes dst-address=\
6.6.6.6 dst-port=8443,9443 protocol=tcp src-address=5.103.53.162 \
to-addresses=10.0.0.20
add action=masquerade chain=srcnat comment="Masq everything out main IP" \
out-interface=ether1-WAN
/ip firewall service-port
set ftp disabled=yes
set tftp disabled=yes
set irc disabled=yes
set h323 disabled=yes
set sip disabled=yes
set pptp disabled=yes
set udplite disabled=yes
set dccp disabled=yes
set sctp disabled=yes
/ip route
add distance=1 gateway=1.1.1.1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/system ntp client
set enabled=yes server-dns-names=pool.ntp.org,time.nist.gov
Thanks for your time!
