I've come to the realization, I need more speed!

REF: viewtopic.php?f=2&t=132537
REF: viewtopic.php?f=2&t=135434
REF: viewtopic.php?f=2&t=135425

Providers Modem:

* note the buffer bloat... ouch!

hAP AC: * firewall rules, port mirroring on, netflow on


hAP AC: * firewall rules, port mirroring off, netflow off


hAP AC: * defcon, only nat, no filter rules, port mirroring off, netflow off

* does not have the fasttrack filter rule.

Architecture of my network:


I've since moved ether5 (to 4), and made ether5 the SPAN Port.

I can plug the SFP module into the Mikrotik. It does work. No difference in speed tests really. I'm using the TP-Link because a) I already bought it and b) I can quickly plug a PC into it and be directly connected by passing all my equipment. The provider gives me a 'Homehub' which is a Sagemcom F@ST 5250. The issue is that the modem breaks under heavy load, can't do a HE IPV4-IPV6 tunnel (modem hard locks), and you are forced to use only a single 192.168.2/24 netblock (cant be changed). For my lab, that just won't cut it.

I am looking for recommendations on what to buy to handle my 1Gb link with multiple PPPOE clients (providing multiple IP's), provide port mirroring and netflow, and handle around 15 IP filter rules.

Kind Regards,

Ian

Just bear in mind that the port mirroring will always cause some trouble at full speed, because the mirror destination receives frames from both directions of the mirror source. So either it must drop some of them (which means that the monitoring equipment connected to the mirror destination doesn't get a copy of every frame), or the forwarding to/from the mirror source is delayed until the frame can be sent out the mirror destination which affects the total throughput bandwidth. I hazily remember that the switch chips used in lower end Routerboards do the latter.

1. hAP ac2 or hEX (RB750Gr3)
2. RB1100AHx4 or Dx4 variant (Dude edition)
3. CCR1009 (CCR1009-7G-1C-1S+PC is passively cooled)

Those are affordable Gigabit Ethernet WAN routing options depending on how aggressively you use your connection and the nature of the traffic. All but the RB1100 can be silent, as a bonus. The RB1100 is still very quiet.

ISPs quite often use the hEX for Gigabit CPE. Technically, the new hAP ac2 is more powerful, except for multiple IPSEC tunnels.

Personally, I wouldn't use anything less than the RB1100 for a symmetrical Gigabit Internet connection because it will still do full Gigabit routing with medium packet sizes (these and lower packet sizes are very common on the Internet) and moderate firewall rules. Then as soon as Mikrotik or someone else comes out with a dual SFP+, passively cooled SOHO router, I would be extremely interested.

Squeeze,
What about RB3011 in the list ?

Squeeze,
What about RB3011 in the list ?

Too many bad issues in the past and does not represent as good value for performance as the others anyway. I am not sure why anyone would buy an RB3011 for Internet traffic when for most medium and lower packets outside of fastpath it cannot even compete with a device less than a third of its cost! (hAP ac2 price when it debuted).

The only significant advantage of the RB3011 is its good switch chip. But at that price point its competing with some CRS, with much more advanced switch chips, for many functions on internal networks. It also has an SFP port and USB 3.0, which are nice in some circumstances.

Always good to know about others experience
So hap-ac2 is comparable if not better with 3011 ??
So it should be better than HEX or HEXs ?

Or is it quality vs price involved in your comparation ?

Always good to know about others experience
So hap-ac2 is comparable if not better with 3011 ??
So it should be better than HEX or HEXs ?

Or is it quality vs price involved in your comparation ?

You can see the Test Results yourself from each Mikrotik product page. Mikrotik are transparent that way.


hAP ac2:

RB3011:

If you are forwarding between more than two physical interfaces, then RB3011 and its more powerful CPU is the obvious pick, especially in LAN.

If you are only forwarding between two physical interfaces, as you would be in most consumer Internet connections (WAN<->LAN) and much traffic has to pass through firewall rules and is medium to small packets, then hAP ac2 has better performance.

This is without any consideration of price, just usage and common context.

Once you add in the factor differences in price, then value becomes even clearer.

If you already had an RB3011, then obviously you wouldn't change it unless its dogged by other problems. The difference is not that significant and overall the RB3011 with its more powerful CPU and utility may be more useful to have.

I am not sure how else to explain it. It is not as simple as which one is "better" overall or in absolute sense (or maybe there is a language issue here and you wanted to ask something very specific instead).

Only you, the consumer can decide that, depending on how you want to use a device.

For me, I keep well away from RB3011 because when viewed within Mikrotik's product portfolio it has an awkward performance profile as well as pricing, even if it had not had issues in the past. So, if there is anything "better" it is that there often alternatives to an RB3011, depending on context.

1. hAP ac2 or hEX (RB750Gr3)
2. RB1100AHx4 or Dx4 variant (Dude edition)
3. CCR1009 (CCR1009-7G-1C-1S+PC is passively cooled)

Those are affordable Gigabit Ethernet WAN routing options depending on how aggressively you use your connection and the nature of the traffic. All but the RB1100 can be silent, as a bonus. The RB1100 is still very quiet.

.
I have the RB1100AHDx4Dude and it's fanless, so very quiet.

i think rb1100ahx4 is a good choice