Hey All,

We are having issues with the forwarding capacity of the RB1000. I was under the impression that that model would push roughly 1.0GBit/s @ 64byte/packet. We just had a link in a ring fail and as a consequence we doubled the traffic going through a single RB1000. The router shows 100% and adds about 30-80ms of latency to the traffic when the total load approaches 650Mbit/s. This is internet traffic with some VoiP, but the avg. packet size is closer to 1500 than 64. In any case there is no firewall rules or mangles, all the router does is forward traffic and run OSPF.

可能会出现什么问题?

Regards,

Martin Madsen
Bel Air Internet

Ps. All interfaces have private ips on them and the logs show no attempts at brute force (that might consume CPU)

Sacrificed our firewall and disabled the connection tracking. This dropped the load to 60% @ about 840Mbit/s.

Should this be necessary? is the routing performance based on no tracking? And as i understand it firewall will not work once Conn. Track is disabled, is this correct?

Regards,

Martin Madsen
Bel Air Internet

Well the main problem seems to be that the RB1000 is not nearly as powerful as the performance tests make you think...

I have about 340 megabits of traffic running to a RB 1000 (IPTV multicast), which results in a constant ~40-45% CPU load (with conntracking).
That board does pretty much nothing except burn that traffic without forwarding it. According to the performance tests,
you would think that it had a cpu load of less than 20% with these traffic levels... To top it all off, it's just about 35000 pps

When I switch the multicast traffic off, the other stuff it does (a handful of EoIP tunnels with only a couple megabits) only uses up 2% cpu
Activating Metarouter causes the CPU load to double, and hangs the RB1000 about every two weeks - so don't do metarouter