hello
we used ccr1009 for hotspot feature. when we add vlans to hotspot we get high cpu usage on all CPUs. and it works fine without vlans
for example on one port we have three vlans, on each vlan hotspot server created. with aprox 350 active hotspot users we have aprox 70% usage of all CPUs.
in cpu profile 90% is firewall.
mangle and queue tree are also used in configuration.
Why do vlan require so much resources?

CCR1009 is a router, not a switch,
all vlan packet are processed on CPU

On fileld max speed is near 15Gbps and drop near 1Gbps each 10 users...
On full use, max concurrent active users are near 1000, without vlan

what device do you recommend to keep 4000-4500 active hotspot users on?

what device do you recommend to keep 4000-4500 active hotspot users on?

I do not consider what I do not know,
actually I use two CCR1036-12G-4S (the 2nd is for backup) and two separate radius on RB1100Dx4 (Dude Edition) (also the 2nd for backup) with "SSD" disk
On the summer reach 4-5000 users on the various beach on our region without problem

do you use vlans on the CCR? and how?
It seems my issue is connected with additional vlan load for CPU when I use Hotspot

what device do you recommend to keep 4000-4500 active hotspot users on?

I do not consider what I do not know,
actually I use two CCR1036-12G-4S (the 2nd is for backup) and two separate radius on RB1100Dx4 (Dude Edition) (also the 2nd for backup) with "SSD" disk
On the summer reach 4-5000 users on the various beach on our region without problem

do you use vlans on the CCR? and how?
It seems my issue is connected with additional vlan load for CPU when I use Hotspot

I do not use vlan on any part for my network.
Except for Cambium PTP 450b login with MikroTik client (450b software sucks....)
I use EoIP with IPsec.

make some changes in my config.
made a main vlan with majority of traffic as access port and two additional vlan trunk on the same etherport. but still have 50% load when guest traffic about 100mbps.
thus to keep 1000 active users with 1 GB I need more powerfull device that mikrotik doesnt have. and otherwise @rextended says up to 5000 users. Im confused.
Can radius server solve my issue?