Community discussions

MikroTik App
 
Insanityflea
just joined
Topic Author
Posts: 15
Joined: Thu Jul 31, 2014 9:30 am

Cpu pegged at 100%

Wed Dec 07, 2022 6:59 pm

Hi all,

I have a RB960PGS (hEX PoE) I have a number of firewall rules (22) and queues (14) and VPN.
My internet has recently been bumped to 200mbps. I cant get more than 115mbps before the router CPU pegs at 100%.
Overclocking the router to 1000mhz I get 135mbps. (All ethernet ports are at 1gbps)
A blank router hits 200mbps easy. It seems I'm CPU bound on the router.
I cant reduce the rules or queues or config, can you recommend a more powerful router?
Needs capsman, PoE and 5 ports min.

Thank you
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 11381
Joined: Thu Mar 03, 2016 10:23 pm

Re: Cpu pegged at 100%

Wed Dec 07, 2022 8:17 pm

Official test results for RB960PGS indicate that this device is in real life capable of routing at around 320 Mbps give or take. Since your config is on the complex side, you're hitting the ceiling already at 200Mbps.

So when skimming through list of Mikrotik devices, check test results: look at "Ethernet test results - Routing 25 ip filter rules - 512 byte packet size" and scale number shown by a factor of 0.6 to adjust to your rule set. Then select device which satisfies performance and other criteria.
 
pe1chl
Forum Guru
Forum Guru
Posts: 10183
Joined: Mon Jun 08, 2015 12:09 pm

Re: Cpu pegged at 100%

Wed Dec 07, 2022 9:48 pm

Probably he has upgraded to RouterOS v7. That cuts the performance as well. The published figures of course are for RouterOS v6 so when you want to achieve those, install that.
 
Insanityflea
just joined
Topic Author
Posts: 15
Joined: Thu Jul 31, 2014 9:30 am

Re: Cpu pegged at 100%

Thu Dec 08, 2022 5:36 am

Indeed, routerOS v7.6, I'll roll back to v6 for now see if that gives me a bit of a difference.

Thank you for the performance explanation, I'll browse through the devices.
 
pe1chl
Forum Guru
Forum Guru
Posts: 10183
Joined: Mon Jun 08, 2015 12:09 pm

Re: Cpu pegged at 100%

Thu Dec 08, 2022 11:35 am

Yes, netinstall version 6.49.7 and start from defaults. Observe what causes your performance drop, it may be that you are doing something wrong.
(e.g. w.r.t. the order of firewall rules, or using stupid things like L7 matching)

Also when you want a VPN, make sure you next buy a router that can do hardware acceleration of that VPN.
More modern devices can do accelerated IPsec, this older router does that in the CPU.

Who is online

Users browsing this forum: robertkjonesjr and 14 guests