The issue becomes apparent when you exceed ~3gbps traffic

On 7/12/2021 8:07 PM, Steve Jones wrote:
we do limited NAT in ours with BGP, but we dont go over 2gbs. We recently finished deploying all our new ARIN IP space so we have very little NAT. Never had the issue, but thats not a statement that it doesnt happen, its more a statement of we stopped NAT before traffic got to the point it did happen

On Mon, Jul 12, 2021 at 5:52 PM Josh Luthman <j...@imaginenetworksllc.com <mailto:j...@imaginenetworksllc.com>> wrote:

    That's what I've heard, too.  The 1072 doesn't like NAT and/or
    connection tracking.

    Josh Luthman
    24/7 Help Desk: 937-552-2340
    Direct: 937-552-2343
    1100 Wayne St
    Suite 1337
    Troy, OH 45373


    On Mon, Jul 12, 2021 at 3:05 PM Steve Jones
    <thatoneguyst...@gmail.com <mailto:thatoneguyst...@gmail.com>> wrote:

        as I understand it its an issue with the 1072s specifically

        On Mon, Jul 12, 2021 at 1:49 PM Matt
        <matt.mailingli...@gmail.com
        <mailto:matt.mailingli...@gmail.com>> wrote:

            Is it something specific with the CCR1072? We have been
            using the
            CCR1036 units for quite a while and have had no issues.
            Not doing NAT
            but doing BGP and firewalling etc.

            On Mon, Jul 12, 2021 at 1:22 PM castarritt
            <castarr...@gmail.com <mailto:castarr...@gmail.com>> wrote:
            >
            > We have had a CCR1072 doing all our NAT for years, but
            lately it has been unstable.  Obviously, we can't just
            turn off connection tracking, so it looks like we will be
            replacing it.  We are looking at switching to a CHR
            solution, but we don't know what kind of hardware would be
            ideal, or how performance would compare to a CCR.  We are
            pushing ~6.5g of traffic at peak, and CPU usage on the
            1072 tops out around 25-30%.
            >
            > Maxxwave has their "Vengeance 3" with an 8-core 9900k
            CPU, or we could get a used R630 with 2x E5-2698V4 20-core
            CPUs for about the same money.  The 9900k would be faster
            for single-threaded processes, but the server would have
            way more cores and cache.
            > --
            > AF mailing list
            > AF@af.afmug.com <mailto:AF@af.afmug.com>
            > http://af.afmug.com/mailman/listinfo/af_af.afmug.com
            <http://af.afmug.com/mailman/listinfo/af_af.afmug.com>

-- AF mailing list
            AF@af.afmug.com <mailto:AF@af.afmug.com>
            http://af.afmug.com/mailman/listinfo/af_af.afmug.com
            <http://af.afmug.com/mailman/listinfo/af_af.afmug.com>

-- AF mailing list
        AF@af.afmug.com <mailto:AF@af.afmug.com>
        http://af.afmug.com/mailman/listinfo/af_af.afmug.com
        <http://af.afmug.com/mailman/listinfo/af_af.afmug.com>

-- AF mailing list
    AF@af.afmug.com <mailto:AF@af.afmug.com>
    http://af.afmug.com/mailman/listinfo/af_af.afmug.com
    <http://af.afmug.com/mailman/listinfo/af_af.afmug.com>


-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Reply via email to