CCR1009-8g-1s
Posted: Thu Feb 26, 2015 12:50 pm
by chaf84
Hi
I have a question about port performance. On this router port 1-4 is connected to a switch chip. All traffic are going through the firewall rules.
If i look at the datasheet it seems that it better to use port 5-8 because this ports are connected directly to the cpu.
So my question is what ports have the best performance if all traffic need to go through the cpu?
Re: CCR1009-8g-1s
Posted: Thu Feb 26, 2015 2:17 pm
by mpreissner
You're correct. Ports 1-4 share a single 1 Gbps uplink to the CPU. Ports 5-8 are directly connected to the CPU, as is the SFP port. The question is really how many networks are you routing, and how many of them need a full 1 Gbps?
I'm going to end up using one of these CCR-1009's at my home. My ISP only provides me with 75 Mbps up/down (though I can order up to 500/500). It makes sense for me to put the ISP somewhere in the switch group (ports 1-4) as I can later add additional ISPs for redundancy and load balance. Or I could get additional public IP addresses and use 3 of those ports for DMZ servers.
Bottom line, if you need a full 1 Gbps of routing performance for a particular subnet, put it on ports 5-8 or the SFP. You can put something on the switch group, but remember than any subnets routing through those ports will have to share the 1 Gbps, so use that only with subnets that don't route a lot of traffic.
Re: CCR1009-8g-1s
Posted: Thu Feb 26, 2015 3:18 pm
by chaf84
You're correct. Ports 1-4 share a single 1 Gbps uplink to the CPU. Ports 5-8 are directly connected to the CPU, as is the SFP port. The question is really how many networks are you routing, and how many of them need a full 1 Gbps?
I'm going to end up using one of these CCR-1009's at my home. My ISP only provides me with 75 Mbps up/down (though I can order up to 500/500). It makes sense for me to put the ISP somewhere in the switch group (ports 1-4) as I can later add additional ISPs for redundancy and load balance. Or I could get additional public IP addresses and use 3 of those ports for DMZ servers.
Bottom line, if you need a full 1 Gbps of routing performance for a particular subnet, put it on ports 5-8 or the SFP. You can put something on the switch group, but remember than any subnets routing through those ports will have to share the 1 Gbps, so use that only with subnets that don't route a lot of traffic.
Thank you just what I needed. It will route 3 different network and it need to be 1gbit speed.