If the firewall turn onconnection tracking, the speed of drops from our subscribers.
ROS V6.2 jule 17
CCR Queue and connection tracking in firewall [low speed]
You do not have the required permissions to view the files attached to this post.
Re: CCR Queue and connection tracking in firewall [low speed
With connectioin tracking not work correctly simple queue.
You do not have the required permissions to view the files attached to this post.
Re: CCR Queue and connection tracking in firewall [low speed
I wrote on support@mikrotik.ocm, has provided supout.rif 2 files before and after the problem. We were given access to our CCR1036.
Dear mikrotik you are interested in solving problems with CCR1036?
Dear mikrotik you are interested in solving problems with CCR1036?
Re: CCR Queue and connection tracking in firewall [low speed
Here are my mark packet rule. They are quite simple and will work no matter on or off connection tracking.
But the problem starts when you turn on connection tracking.
But the problem starts when you turn on connection tracking.
Code: Select all
ip firewall mangle print
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; Pautina_3000
chain=postrouting action=mark-packet new-packet-mark=Pautina_3000 passthrough=no src-address-list=!Piring dst-address-list=Pautina_3000
1 ;;; Pautina_2500
chain=postrouting action=mark-packet new-packet-mark=Pautina_2500 passthrough=no src-address-list=!Piring dst-address-list=Pautina_2500
2 ;;; Pautina_2000
chain=postrouting action=mark-packet new-packet-mark=Pautina_2000 passthrough=no src-address-list=!Piring dst-address-list=Pautina_2000
3 ;;; Pautina_1750
chain=postrouting action=mark-packet new-packet-mark=Pautina_1750 passthrough=no src-address-list=!Piring dst-address-list=Pautina_1750
4 ;;; Pautina_1500
chain=postrouting action=mark-packet new-packet-mark=Pautina_1500 passthrough=no src-address-list=!Piring dst-address-list=Pautina_1500
5 ;;; Pautina_1250
chain=postrouting action=mark-packet new-packet-mark=Pautina_1250 passthrough=no src-address-list=!Piring dst-address-list=Pautina_1250
6 ;;; Pautina_1000
chain=postrouting action=mark-packet new-packet-mark=Pautina_1000 passthrough=no src-address-list=!Piring dst-address-list=Pautina_1000
7 ;;; Pautina_750
chain=postrouting action=mark-packet new-packet-mark=Pautina_750 passthrough=no src-address-list=!Piring dst-address-list=Pautina_750
8 ;;; Pautina_500
chain=forward action=mark-packet new-packet-mark=Pautina_500 passthrough=no src-address-list=!Piring dst-address-list=Pautina_500
Re: CCR Queue and connection tracking in firewall [low speed
Simple Queue:
Code: Select all
queue simple print
Flags: X - disabled, I - invalid, D - dynamic
0 name="500" target="" dst=wan parent=none packet-marks=Pautina_500 priority=8/8 queue=PCQ_upload_5M/PCQ_download_500 limit-at=0/0 max-limit=0/0 burst-limit=0/0
burst-threshold=0/0 burst-time=0s/0s total-queue=default
1 name="1000" target="" parent=none packet-marks=Pautina_1000 priority=8/8 queue=PCQ_upload_5M/PCQ_download_1000 limit-at=0/0 max-limit=0/0 burst-limit=0/0
burst-threshold=0/0 burst-time=0s/0s total-queue=default
2 name="3000" target="" dst=wan parent=none packet-marks=Pautina_3000 priority=8/8 queue=PCQ_upload_5M/PCQ_download_3000 limit-at=0/0 max-limit=0/0 burst-limit=0/0
burst-threshold=0/0 burst-time=0s/0s total-queue=default
3 name="1250" target="" dst=wan parent=none packet-marks=Pautina_1250 priority=8/8 queue=PCQ_upload_5M/PCQ_download_1250 limit-at=0/0 max-limit=0/0 burst-limit=0/0
burst-threshold=0/0 burst-time=0s/0s total-queue=default
4 name="750" target="" dst=wan parent=none packet-marks=Pautina_750 priority=8/8 queue=PCQ_upload_5M/PCQ_download_750 limit-at=0/0 max-limit=0/0 burst-limit=0/0
burst-threshold=0/0 burst-time=0s/0s total-queue=default
5 name="2000" target="" dst=wan parent=none packet-marks=Pautina_2000 priority=8/8 queue=PCQ_upload_5M/PCQ_download_2000 limit-at=0/0 max-limit=0/0 burst-limit=0/0
burst-threshold=0/0 burst-time=0s/0s total-queue=default
6 name="1500" target="" dst=wan parent=none packet-marks=Pautina_1500 priority=8/8 queue=PCQ_upload_5M/PCQ_download_1500 limit-at=0/0 max-limit=0/0 burst-limit=0/0
burst-threshold=0/0 burst-time=0s/0s total-queue=default
7 name="1750" target="" dst=wan parent=none packet-marks=Pautina_1750 priority=8/8 queue=PCQ_upload_5M/PCQ_download_1750 limit-at=0/0 max-limit=0/0 burst-limit=0/0
burst-threshold=0/0 burst-time=0s/0s total-queue=default
8 name="2500" target="" dst=wan parent=none packet-marks=Pautina_2500 priority=8/8 queue=PCQ_upload_5M/PCQ_download_2500 limit-at=0/0 max-limit=0/0 burst-limit=0/0
burst-threshold=0/0 burst-time=0s/0s total-queue=default
Re: CCR Queue and connection tracking in firewall [low speed
top
Ticket#2013071966000608
Ticket#2013071966000608
Re: CCR Queue and connection tracking in firewall [low speed
In 6.19 changelog:
"simple queue performance optimisation/improvement for multi-core RouterOS devices (especially CCR)"
Can you test with this version?
"simple queue performance optimisation/improvement for multi-core RouterOS devices (especially CCR)"
Can you test with this version?