tools - profile - firewall - cpu 30-40%, but ALL firewall rules OFF (filter, nat. mangle - 0 rules).

what is a mystery ?

Hello
I think its Connection Tracking...Disable it and check your router profile again.

Good luck.

Hello
I think its Connection Tracking...Disable it and check your router profile again.

Good luck.

What good does disabling of the connection tracking will do? Why should I need it anyway?

Features affected by connection tracking

NAT
firewall:
connection-bytes
connection-mark
connection-type
connection-state
connection-limit
connection-rate
layer7-protocol
p2p
new-connection-mark
tarpit
p2p matching in simple queues

http://wiki.mikrotik.com/wiki/Manual:IP ... n_tracking

hassibi, Thank you!!!!!!!
(Огромное спасибо)

Exactly!!!!

Conntrack disabled and cpu load go down.
Although none of these features have not been used:

Features affected by connection tracking

NAT
firewall:
connection-bytes
connection-mark
connection-type
connection-state
connection-limit
connection-rate
layer7-protocol
p2p
new-connection-mark
tarpit
p2p matching in simple queues

******
And conntrack table is not full
******

Why?

Because by default RouterOS check connection and its state.
its recommended that disable connection tracking if not use that feature...

Good Luck

Features affected by connection tracking

NAT
firewall:
connection-bytes
connection-mark
connection-type
connection-state
connection-limit
connection-rate
layer7-protocol
p2p
new-connection-mark
tarpit
p2p matching in simple queues

http://wiki.mikrotik.com/wiki/Manual:IP ... n_tracking

but, what could be the reason for this behavior?

I still need to use DNAT.

I remind you - a few more similar servers with enable conntrack, but do not have this problem.
An interesting mechanism of the phenomenon .....

no idea?

help......................................