Community discussions

MikroTik App
 
skraw
just joined
Topic Author
Posts: 9
Joined: Tue Mar 12, 2019 2:55 pm

How to make a really stable L2TP connection ?

Mon Feb 15, 2021 4:54 pm

Hello all,

we have several CCR1036 on several locations and try (for months now) to set up really stable L2TP connections between them. Unfortunately we have the following experiences up to now:
Starting with RouterOS 6.40 upwards (we did not try earlier versions) all L2TPs based on CCR1036 crash every now and then without the slightest message in the logs what happened. The connections are simply hung up and mostly do not come up again without user interaction. The connections btw should have peak rates of around 800 Mbit/s.
Even as admin we are often not able to restore them by disable/enable. Instead we found out they often come back only by enabling IPSec. 10 minutes later they mostly can be restored again without IPSec. We don't want to use IPSec because it is dead slow on single TCP streams, we cannot get more than around 30-50 Mbit/s with a single stream, whereas without we easily reach around 500 Mbit/s.
The crashes happen every now and then, lets say around twice a month. It seems they can be triggered by an immediate high load on the L2TP. We are not talking about a peak, but more a jump from lets say 50 Mbit/s to a continous 500 Mbit/s. Which means of course this can be used for a DoS.
We tried to overcome the problem with new hardware, CCR2004. That was no good idea. This box crashes every 6-12 hours in the same setup and is not stable at all. We even saw kernel crashes in the logs. Our impression is the build system for ARM64 Mikrotik uses is broken.
So we stopped using CCR2004 completely and are trying to give them back.
Our problem stays: can anyone show a config or share an experience of a really stable working L2TP with around Gbit bandwith?

Regards
 
skraw
just joined
Topic Author
Posts: 9
Joined: Tue Mar 12, 2019 2:55 pm

Re: How to make a really stable L2TP connection ?

Thu Feb 25, 2021 11:14 am

Since nobody has ideas, is there a way to do the equivalent of this on routeros:

linux:

net.core.rmem_max=26214400
net.core.rmem_default=26214400

How can we enlarge the net buffers on routeros?
 
User avatar
loloski
Member Candidate
Member Candidate
Posts: 295
Joined: Mon Mar 15, 2021 9:10 pm

Re: How to make a really stable L2TP connection ?

Sat Apr 03, 2021 3:21 am

Since nobody has ideas, is there a way to do the equivalent of this on routeros:

linux:

net.core.rmem_max=26214400
net.core.rmem_default=26214400

How can we enlarge the net buffers on routeros?
I don't think you can do this level of tunable in ROS

Who is online

Users browsing this forum: amt, Bing [Bot], JesusUve, Kipk, kkeyser and 82 guests