Hi all!
I'm starting a hosting company and I'm looking to add a CCR as a main router in my rack.
My question is about DDos attacks. In the specs it says +22 millions of pps. But if all my traffic is doing on only 1 port, also are available the 22 millions of pps to this port?
I think the 22 million of pps are the sum of the 12 gigabit + 4 SPF ports. The, what is the pps limit on each port?

- Sorry for my bad english!

Thanks!

the limit of the port is the limit of possible packets per second (ccr will transfer at maximum possible = wire speed).packet size can be different (for example, the 24 million result was achieved on all ports, each packet 64 bytes), you can calculate how many packets you will get, knowing that the CCR has Gigabit ports.

CPU is component that process packets - so you can't talk about per port pps, you need to talk about per device pps.

How will you distribute this pps across existing ports is only up to your requirements.


In theory you can't get 22mpps over single gigabit port - you can get only limited number smallest size packets per port. Packet need to have specific set of headers so min possible size is limited

I think it's a valid question, no matter what cumulative maximum pps is:

Is CCR able to handle maximum possible frame rate (1 488 095*2) on a 1Gb interface?

EDIT:
And the answer appears to be Yes...for a router with firewall with 25 rules:
http://forum.mikrotik.com/viewtopic.php ... cr#p346543

yes, it can.