3-5%...i must have something configured incorrectly or im horribly misunderstanding your post...any test i run through iperf pins the cpu unless i specify multiple channels...
I think you need to limit your config and find the culprit because there's definitely something wrong. Initially I was running L2 through CPU, I setup a quick test with L3 for you where I'm transferring data inter-VLAN:
- Trunk port (say ether5) with two VLANs on it: ether5-30 & ether5-31
- Access port (say ether5) where a proxmox machine is connected
- Computer connected to trunk port (ether5) with packets tagged with VID=31
- RB4011 has a bridge1-30 with two ports in it: ether5-30 and ether6
- Bridge has no collision/filtering/firewall/VLAN enabled
Running "iperf3 -s" on a VM and "iperf3 --bidir -c VM" on the client. In this scenario RB4011 is doing a L3 between VLAN 30 & 31 in full duplex at once. The result is fine for me (lower than 2Gb/s due to other factors):
[ ID][Role] Interval Transfer Bitrate Retr
[ 7][TX-C] 0.00-10.00 sec 980 MBytes 822 Mbits/sec sender
[ 7][TX-C] 0.00-10.00 sec 979 MBytes 821 Mbits/sec receiver
[ 9][RX-C] 0.00-10.00 sec 1.06 GBytes 906 Mbits/sec 28 sender
[ 9][RX-C] 0.00-10.00 sec 1.05 GBytes 904 Mbits/sec receiver
During the test the CPU is not unreasonably loaded:
Screen Shot 2020-12-18 at 1.43.32 PM.png
iperf test between 2 VLANS with 3-5% cpu usage?
I initially misread your message (different timezone, it was middle of the night here ;)). With just VLANs 3-5% average is normal, but if you add L3 routing to the mix you can see the average CPU for the whole system being around 10%.
Something is definitely wrong, the fasttrack rule should be hitted only once per connection, after that it's traffic should be fasttracked.
And something is preventing that.
This ↑ is probably your issue. FT rule should not count all the data:
Screen Shot 2020-12-18 at 2.04.18 PM.png
Look at
https://wiki.mikrotik.com/wiki/Manual:I ... figuration - especially the part where you match the traffic. Maybe you can export the config with hide-sensitive?
You do not have the required permissions to view the files attached to this post.