Hello everyone,

I have been using RB951G-2HnD/RB751U-2HnD with great success...
It really great device.
I'm using it primary for vpn/firewall/QoS. I notice that the CPU is hitting 100% and I understand that I probably hit the limit of those devices - especialy when there is alot incoming connection then the dropping start to trigger and basically without limiting connection number per that one ip router is having the worst time of his live.
Also with the configuration I'm using on 250/25 internet I'm getting 100/25 - after disabling firewall/qos/vpn im seeing 130/25 and cpu is still in his high 90% ( even after overclocking to 700MHz)

I'm looking for a replacement, I found RB750GR3 (its a dual core 880MHz cpu which is a big boost from 600MHz single core) but it looks like its very fast with firewall/qos disable and same slow with both enabled (https://mikrotik.com/product/RB750Gr3#fndtn-testresults) which is something strange to be honest for dual core that is faster but looking on same results for RB951 (https://mikrotik.com/product/RB951G-2Hn ... estresults) yell conclusion that I'm not seeing something (or don't know how to read it) - but looking at scheme for those cores it looks like 1 handle ports 1,3,5 and other does 2,4.

I don't mind loosing WiFi (because I will continue to use my ap router as wifi access point) I just want to improve download speed for everything that is connected by cable.

Will RB750GR3 handle 250 Mbps with firewall/qos or should I look on something with bigger budget ? Or are there any other recommendations ?

Yes, the hEX is very powerful and a much better CPU than you have now.
But the question is, why is your RB951G hitting the CPU limit. Maybe the firewall can be optimised and you don't need a new device? Depends on what you do there actually.

with rb750Gr3 you can expect 60% 1.6X of improvement on CPU performance and the plus of HW acceleration for encryption

i think hAP Ac2 is a better replacement

more CPU processing power than rb750Gr3 (2.6X times the performance)
4.2X times the rb951G performance

that's because hAP Ac2 have quad core 700mhz

Just keep in mind you dont have 30dbm tx power on 2.4ghz radio like the rb951G you can expect less 2.4ghz wifi coverage with hAP Ac2

if you want a even powerful router for longer term solution take in count RB4011iGS+RM
9.9X times the performance of RB951G
6.0X times the performance of RB750Gr3
2.3X times the performance of hAP Ac2

that's because RB4011 have quad core 1400mhz

rb750Gr3 60US
hAP Ac2 70US
RB4011 200US

The best Cost VS performance ratio is on hAP Ac2 plus the 2 wireless radios

Yes, the hEX is very powerful and a much better CPU than you have now.
But the question is, why is your RB951G hitting the CPU limit. Maybe the firewall can be optimised and you don't need a new device? Depends on what you do there actually.

What you think anything can be done ? some time ago I tried to optimize those and end up with current setup.

with rb750Gr3 you can expect 60% 1.6X of improvement on CPU performance and the plus of HW acceleration for encryption

i think hAP Ac2 is a better replacement

more CPU processing power than rb750Gr3 (2.6X times the performance)
4.2X times the rb951G performance

that's because hAP Ac2 have quad core 700mhz

Just keep in mind you dont have 30dbm tx power on 2.4ghz radio like the rb951G you can expect less 2.4ghz wifi coverage with hAP Ac2

if you want a even powerful router for longer term solution take in count RB4011iGS+RM
9.9X times the performance of RB951G
6.0X times the performance of RB750Gr3
2.3X times the performance of hAP Ac2

that's because RB4011 have quad core 1400mhz

rb750Gr3 60US
hAP Ac2 70US
RB4011 200US

The best Cost VS performance ratio is on hAP Ac2 plus the 2 wireless radios

To be honest I never consider hAP ac2 but it looks like best solution right now.
From what i see Rb4011 would be the best solution but the x2 increase from hAP is for almost x4 (here).
Also there is almost non 4011 available where I live so the price is solid.

I'm definitely going with that hAP ! its the sweeet spot I need if it will be x2.5 faster than the current one I have then I will use full potential of my ISP link, and if it will be really x4 then I will be even more pleased with extra horse power inside (maybe I will play with VM on RB more xD )

Btw, You shouldn't have told me about 4011 now my heart don't want to forget about him ;p but I'm not needing to upgrade download speed anyway, it was always the upload speed that was driving my ISP plan anyway.

I have 951Gˋs running as well plus a new hap ac2. As long as you can use FP routing you are happy. When it comes to vlan aware bridging the new hap ac2 makes u happy. It is a really nice and fast router and I am happy with the wireless as well. The 4011 is for those who need all cpu based routing or bridging (no fast ‘something’) or want to play with 4S wireless.
The hap ac2 still works rock solid and fast (mostly at wire speed when using fast path/track) even if cpu comes into play.

I would like to thank you guys.
I bought hAP ac^2, by using same 1:1 configuration on 250/250 mbps link I have those results:
-- old router --
max: 102 mbps
cpu: 100%

-- new router --
max: ~240 mbps
cpu: ~17%