high CPU utilization RB2011L (100%CPU)

thetigerzzz · Thu Nov 13, 2014 9:26 am

Network Setup:
7 DSL lines with 8_MB speed Each
PCC Load Balancing runing on Router Board RB2011L Mikrotik OS ver 5.16 and also check on router Board RB2011UAS-2Hnd Mikrotik Os ver. 6.1
Problem is Cpu is on 100% at peak times 40 to 30 Traffic going

here is test

ros code

tool profile 
NAME                    CPU        USAGE
ppp                     all           0%
pppoe                   all           2%
ppp                     all           4%
ethernet                all         7.5%
console                 all         0.5%
dns                     all          20%
firewall                all          40%
winbox                  all           0%
management              all         1.5%
profiling               all           1%
queuing                 all        18.5%
routing                 all           2%
unclassified            all           3%

is that any way to make it better ?

thetigerzzz · Fri Nov 14, 2014 12:16 pm

Experts waiting for your attention ?

npero · Fri Nov 14, 2014 1:05 pm

No one can help you without more details. Export you config. Also consider update to version 6.xx because some thing are more optimized in 6.xx.

Fri Nov 14, 2014 7:03 pm

Dns and firewalling. Looks like some attack that is not handled correctly. Maybe...

SystemErrorMessage · Sat Nov 15, 2014 1:59 am

instead of dropping packets, try tarpit. It does the same thing but with less CPU.

thetigerzzz · Mon Nov 17, 2014 9:01 am

Already tested on 6.1 issue is same
here is configuration

/ip firewall mangle
add action=mark-connection chain=input in-interface=pppoe-out1 new-connection-mark=wan1_conn
add action=mark-connection chain=input in-interface=pppoe-out2 new-connection-mark=wan2_conn
add action=mark-connection chain=input in-interface=pppoe-out3 new-connection-mark=wan3_conn
add action=mark-connection chain=input in-interface=pppoe-out4 new-connection-mark=wan4_conn
add action=mark-connection chain=input in-interface=pppoe-out5 new-connection-mark=wan5_conn
add action=mark-connection chain=input in-interface=pppoe-out6 new-connection-mark=wan6_conn
add action=mark-connection chain=input in-interface=pppoe-out7 new-connection-mark=wan7_conn
add action=mark-routing chain=output connection-mark=wan1_conn new-routing-mark=to_wan1
add action=mark-routing chain=output connection-mark=wan2_conn new-routing-mark=to_wan2
add action=mark-routing chain=output connection-mark=wan3_conn new-routing-mark=to_wan3
add action=mark-routing chain=output connection-mark=wan4_conn new-routing-mark=to_wan4
add action=mark-routing chain=output connection-mark=wan5_conn new-routing-mark=to_wan5
add action=mark-routing chain=output connection-mark=wan6_conn new-routing-mark=to_wan6
add action=mark-routing chain=output connection-mark=wan7_conn new-routing-mark=to_wan7
add action=mark-connection chain=prerouting dst-address-type=!local in-interface=Local new-connection-mark=wan1_conn \
    per-connection-classifier=both-addresses-and-ports:7/0
add action=mark-connection chain=prerouting dst-address-type=!local in-interface=Local new-connection-mark=wan2_conn \
    per-connection-classifier=both-addresses-and-ports:7/1
add action=mark-connection chain=prerouting dst-address-type=!local in-interface=Local new-connection-mark=wan3_conn \
    per-connection-classifier=both-addresses-and-ports:7/2
add action=mark-connection chain=prerouting dst-address-type=!local in-interface=Local new-connection-mark=wan4_conn \
    per-connection-classifier=both-addresses-and-ports:7/3
add action=mark-connection chain=prerouting dst-address-type=!local in-interface=Local new-connection-mark=wan5_conn \
    per-connection-classifier=both-addresses-and-ports:7/4
add action=mark-connection chain=prerouting dst-address-type=!local in-interface=Local new-connection-mark=wan6_conn \
    per-connection-classifier=both-addresses-and-ports:7/5
add action=mark-connection chain=prerouting dst-address-type=!local in-interface=Local new-connection-mark=wan7_conn \
    per-connection-classifier=both-addresses-and-ports:7/6
add action=mark-routing chain=prerouting connection-mark=wan1_conn in-interface=Local new-routing-mark=to_wan1
add action=mark-routing chain=prerouting connection-mark=wan2_conn in-interface=Local new-routing-mark=to_wan2
add action=mark-routing chain=prerouting connection-mark=wan3_conn in-interface=Local new-routing-mark=to_wan3
add action=mark-routing chain=prerouting connection-mark=wan4_conn in-interface=Local new-routing-mark=to_wan4
add action=mark-routing chain=prerouting connection-mark=wan5_conn in-interface=Local new-routing-mark=to_wan5
add action=mark-routing chain=prerouting connection-mark=wan6_conn in-interface=Local new-routing-mark=to_wan6
add action=mark-routing chain=prerouting connection-mark=wan7_conn in-interface=Local new-routing-mark=to_wan7

Mon Nov 17, 2014 10:13 am

Try some newer version. 6.1 is really old...