Upgrading 2 SXT 5HPnD from 6.16 to 6.30.1 causes 100% CPU from process IPSec.
While IPSec is not used AT ALL on those boards.
After disabling/enabling security package and doing a few downgrades/upgrades it finally worked ok on one of the boards, while the other refuses to work ok with security package enabled.
But that was short lived. After about 10 minutes the board that seemed ok just hit 100% cpu usage again. So disabling the security package seems the only way to avoid 100% cpu usage.
Downgrading to 6.29.1 does not solve the issue. Exact same behavior persists.
So at this point I either have to use a way older version or not use the security package (which is stupid, who wants to login to a router using the equivalent of clear-text telnet?
)
Both boards have identical configuration. BGP Routing, no firewall rules at all, no connection tracking, no PPP enabled, NO IPsec, no tunnels, no bridges.
Simple routing between ether1 & wlan1 using BGP. Nothing more, nothing less.
Only System, Security, Routing and Wireless-fp packages are enabled on both boards.
Normis you where saying something about not being true that on every release you break something?
(sorry it's just so funny reading that line
)
Not to burst your bubble, but everyone that uses Mikrotik long enough and/or professionally (ie: multiple boards, multiple installations, multiple configurations, not just a home router) knows for a fact that
upgrading almost always will cause problems somewhere. Especially on version 6.x.
This is not an opinion. It's a fact.
I've been using Mikrotik for 10 years and I have experienced the pattern of broken stuff myself again and again. I don't need to read it on some forums as you put it.
And almost always the affected stuff are not even remotely mentioned in the changelog. So either your code is a mess of spaghetti that by changing one thing another 100 get affected or you change stuff that you never mention on your changelog.
Out of curiosity, which one is it?
Since version 6.x you pretty much broke everything one way or another.
For serious production workloads I still use v5.26. By FAR the most stable version of Mikrotik yet (even though it's missing tons of new features of v6). Too bad v5.x doesn't work on CCRs. It would have been awesome to have a really stable router with that horsepower!