HW acceleration works now. RB5009UG+S+IN (Btest) -- E50UG (IPSec AES128-CBC, SHA1, modp1024, single tunnel) -- Switch -- CCR2116-12G-4S+ -- RB5009UG+S+IN(Btest server) I got 123.5Mbps(Tx)+121.8Mbps(Rx) while CPU usage is around 72%. (about 2x throughput w/o HW acceleration) e50ug_ipsec_7.18_1.PNG e5...

Check if bridge hardware offload is disabled.

HW acceleration is not supported yet.
I got 110Mbps throughput(Tx+Rx) with CCR2116 and CPU usage is quite high('encrypting' takes most of cpu usage from profiling tool) for now.
MikroTik support said they are working on that.

Expecting nice performance improvements in the near future.

I tested MCX4121A-ACAT and CRS518-16XS-2XQ-RM with following accessories.

- MikroTik XS+DA0003 and XS+DA0001
- FS SFP28-25GSR-85
- Ubiquity UACC-OM-SFP28-SR

Will work great with other MikroTik SFP28 router/switch products.

There is hardware repair manual and manual for overvoltage checking but it is not opened for public.
Contact with your local distributor.

/system health detect-fans solved the problem!

Faulty unit shows four fans in system health.
After detect-fan, I can see just three fans.

Accoding to https://wiki.mikrotik.com/wiki/MikroTik ... patibility

CRS312-4C-8XG+ doesn't support S-RJ01

How about add some lightweight crypto algorithm to RouterOS for devices not having hardware crypto engine? The image below is result from openssl speed command.(Openssl 1.0.1u with LEA lightweight crypto integrated) light.PNG In simply, the LEA crypto exceeded about 3 times than AES in speed(Maybe w...