Community discussions

MUM Europe 2020
 
changeip
Forum Guru
Forum Guru
Topic Author
Posts: 3804
Joined: Fri May 28, 2004 5:22 pm

3.18 and BGP w/ full routing tables

Fri Jan 16, 2009 6:41 am

Just a quick poll, is anyone using 3.18 with 150,000+ routes and 100-200mbps of traffic? I think I need to upgrade to get around a memory leak that just started popping up in 2.9.51.

I'm also curious if 3.x still has weird quirks with connection-track turned off... related to fragments, etc.

Sam
Colo and Wholesale Bandwidth Available! Sales at SanDiegoBroadband dot com
 
User avatar
janisk
MikroTik Support
MikroTik Support
Posts: 6283
Joined: Tue Feb 14, 2006 9:46 am
Location: Riga, Latvia

Re: 3.18 and BGP w/ full routing tables

Fri Jan 16, 2009 8:53 am

AFAIK conn-track is the facility in routeros that "glues" fragmented packets together after they are received, then how that ("the glue process") would happen if you disable it? :shock:
 
ste
Forum Guru
Forum Guru
Posts: 1815
Joined: Sun Feb 13, 2005 11:21 pm

Re: 3.18 and BGP w/ full routing tables

Fri Jan 16, 2009 1:58 pm

AFAIK conn-track is the facility in routeros that "glues" fragmented packets together after they are received, then how that ("the glue process") would happen if you disable it? :shock:
What I do not understand is why routers in the middle need conn-track on.
Why do they not just forward the fragments and let the router at the end
of the connection handle fragmentation? Esp when the whole Network can
forward Ethersized packets (1500bytes).

Stefan
 
changeip
Forum Guru
Forum Guru
Topic Author
Posts: 3804
Joined: Fri May 28, 2004 5:22 pm

Re: 3.18 and BGP w/ full routing tables

Fri Jan 16, 2009 9:03 pm

exactly, conn-track is not necessary on every router on the internet is it ? I dont want to glue those fragments back together at the border, that can happen on the core routers that use conn-track. these border routers could care less what is being forwarded, it should just forward packets. So I assume it's still dropping fragments when conn-track is turned off ?

I hope this gets fixed sooner or later...
Colo and Wholesale Bandwidth Available! Sales at SanDiegoBroadband dot com
 
Mplsguy
MikroTik Support
MikroTik Support
Posts: 226
Joined: Fri Jun 06, 2008 5:06 pm

Re: 3.18 and BGP w/ full routing tables

Fri Jan 16, 2009 9:56 pm

You only need conntrack if you wish to use any of functions that require it - NAT, matching according to connection state, and such. In the rest of cases you do not need conntrack and can disable it e.g. for performance reasons, this will not cause fragmented packets to get dropped.
 
changeip
Forum Guru
Forum Guru
Topic Author
Posts: 3804
Joined: Fri May 28, 2004 5:22 pm

Re: 3.18 and BGP w/ full routing tables

Sat Jan 17, 2009 4:33 am

so the dropping of fragments has been fixed since the early 3.x betas? Previously without conn-track it was dropping them.
Colo and Wholesale Bandwidth Available! Sales at SanDiegoBroadband dot com
 
msundman
Frequent Visitor
Frequent Visitor
Posts: 76
Joined: Thu Jan 15, 2009 2:44 pm
Location: Stockholm, Sweden
Contact:

Re: 3.18 and BGP w/ full routing tables

Fri Jan 23, 2009 10:57 am

so the dropping of fragments has been fixed since the early 3.x betas? Previously without conn-track it was dropping them.
Anyone who can confirm this?

I have a customer who is just about to implement a new HA network and do BGP peering with two ISP and are considering buying two Juniper M7i routers. I'm now looking into if it would be possible to use a couple of RB1000s instead as boarder routers.

They will be pushing about a 200-300 Mbps (aggregated halvduplex) traffic through these routers, and they might have to cope with full BGP tables for minimum 2 peers each.

Would you say the RB1000s are stable enough for such a task?

I'm considering running them with connection tracking off then, as they should mainly work as pure routers. I should still be able to apply simple stateless iptables rules even without connection tracking if it becomes neccessary, right?

How about packet forwarding latency? Does that suffer much from running with full BGP routing tables? I would guess that it should only affect the first packet for a source/dest IP pair that has to be looked up in the big routing table, then it should go into the host routing table, which should be of the same size regardless of the size of the normal routing table, or am I wrong?

I'd be very happy to hear if somebody else is using RB1000 or RouterOS at all as full BGP table routers.
 
mhugo
newbie
Posts: 49
Joined: Mon Sep 19, 2005 11:48 am

Re: 3.18 and BGP w/ full routing tables

Thu Feb 12, 2009 3:10 pm

Im very interested in knowing if it works too.

Anyone knows if the RAM can be upped from 512mb?
 
User avatar
JJCinAZ
Member
Member
Posts: 473
Joined: Fri Oct 22, 2004 8:03 am
Location: Tucson, AZ
Contact:

Re: 3.18 and BGP w/ full routing tables

Thu Feb 12, 2009 6:04 pm

We run full BGP tables from multiple peers on ROS 3.13 though we don't use the RB1000. Instead we use an Intel 1U platform with multicore CPU's. Lots of memory available and lots of CPU cycles available for BGP work, filtering, and routing.

As for the fragment dropping, I believe I tested that with ROS 3.x and it was "fixed" but that was some time ago and I can't find my documentation on it. You can easily test that by running an IPSEC tunnel through the router with connection tracking disabled and then do a full 1500 byte, no fragment ping (ICMP) through the tunnel and see if it works. If I had time, I would redo the test for you, but alas, paying customers first.
 
User avatar
Ajar
just joined
Posts: 3
Joined: Mon Jun 04, 2007 11:30 am
Location: Ukraine
Contact:

Re: 3.18 and BGP w/ full routing tables

Tue Feb 17, 2009 4:25 pm

My router :

> system resource print
uptime: 2w6d15h32m3s
version: "3.13"
free-memory: 258740kB
total-memory: 497408kB
cpu: "Intel(R)" (C2D)
cpu-count: 2
cpu-frequency: 2400MHz
cpu-load: 7
free-hdd-space: 78634kB
total-hdd-space: 121215kB
write-sect-since-reboot: 1716
write-sect-total: 1716
architecture-name: "x86"
board-name: "x86"


> ip route print count-only
546367

2хFull Table , Average CPU load ~6% ,
Average traffic ~ 25Mbit/s

Tested average speed ~ 100Mbit/s , CPU load - 25-30%

Conntrack&Bridge IP Firewall - disable
 
Muqatil
Trainer
Trainer
Posts: 574
Joined: Mon Mar 03, 2008 1:03 pm
Location: London - UK
Contact:

Re: 3.18 and BGP w/ full routing tables

Wed Feb 18, 2009 12:29 am

Okay i'm having issues with Mikrotik BGP and full routing tables...
3x peer with full routing table (272k x3 )
If one of the peer goes down, the router goes to 25% CPU (Quad Core Xeon) then crashes.
ROS 3.20 with routing-test.
Renato Bernardi

skype: medtech5

Who is online

Users browsing this forum: No registered users and 103 guests