Yep and Mikrotik won't touch it. Even though there is plenty of memory and resources available.
It seems to be the 1 million connection mark when things go bad. On Tue, Jul 13, 2021 at 8:57 AM Adam Moffett <dmmoff...@gmail.com> wrote: > The issue becomes apparent when you exceed ~3gbps traffic > On 7/12/2021 8:07 PM, Steve Jones wrote: > > we do limited NAT in ours with BGP, but we dont go over 2gbs. We recently > finished deploying all our new ARIN IP space so we have very little NAT. > Never had the issue, but thats not a statement that it doesnt happen, its > more a statement of we stopped NAT before traffic got to the point it did > happen > > On Mon, Jul 12, 2021 at 5:52 PM Josh Luthman <j...@imaginenetworksllc.com> > wrote: > >> That's what I've heard, too. The 1072 doesn't like NAT and/or connection >> tracking. >> >> Josh Luthman >> 24/7 Help Desk: 937-552-2340 >> Direct: 937-552-2343 >> 1100 Wayne St >> Suite 1337 >> Troy, OH 45373 >> >> >> On Mon, Jul 12, 2021 at 3:05 PM Steve Jones <thatoneguyst...@gmail.com> >> wrote: >> >>> as I understand it its an issue with the 1072s specifically >>> >>> On Mon, Jul 12, 2021 at 1:49 PM Matt <matt.mailingli...@gmail.com> >>> wrote: >>> >>>> Is it something specific with the CCR1072? We have been using the >>>> CCR1036 units for quite a while and have had no issues. Not doing NAT >>>> but doing BGP and firewalling etc. >>>> >>>> On Mon, Jul 12, 2021 at 1:22 PM castarritt <castarr...@gmail.com> >>>> wrote: >>>> > >>>> > We have had a CCR1072 doing all our NAT for years, but lately it has >>>> been unstable. Obviously, we can't just turn off connection tracking, so >>>> it looks like we will be replacing it. We are looking at switching to a >>>> CHR solution, but we don't know what kind of hardware would be ideal, or >>>> how performance would compare to a CCR. We are pushing ~6.5g of traffic at >>>> peak, and CPU usage on the 1072 tops out around 25-30%. >>>> > >>>> > Maxxwave has their "Vengeance 3" with an 8-core 9900k CPU, or we >>>> could get a used R630 with 2x E5-2698V4 20-core CPUs for about the same >>>> money. The 9900k would be faster for single-threaded processes, but the >>>> server would have way more cores and cache. >>>> > -- >>>> > AF mailing list >>>> > AF@af.afmug.com >>>> > http://af.afmug.com/mailman/listinfo/af_af.afmug.com >>>> >>>> -- >>>> AF mailing list >>>> AF@af.afmug.com >>>> http://af.afmug.com/mailman/listinfo/af_af.afmug.com >>>> >>> -- >>> AF mailing list >>> AF@af.afmug.com >>> http://af.afmug.com/mailman/listinfo/af_af.afmug.com >>> >> -- >> AF mailing list >> AF@af.afmug.com >> http://af.afmug.com/mailman/listinfo/af_af.afmug.com >> > > -- > AF mailing list > AF@af.afmug.com > http://af.afmug.com/mailman/listinfo/af_af.afmug.com > -- [image: logo] <https://www.wavedirect.net/> <https://www.facebook.com/ruralhighspeed> <https://www.instagram.com/wave.direct/> <https://www.linkedin.com/company/wavedirect-telecommunication/> <https://twitter.com/wavedirect1> <https://www.youtube.com/user/WaveDirect> * STEVEN KENNEY * DIRECTOR OF GLOBAL CONNECTIVITY & CONTINUITY A: 158 Erie St. N | Leamington ON E: st...@wavedirect.org | P: 519-737-9283 W: www.wavedirect.net -- NOTICE OF CONFIDENTIALITY This communication, including any attachments, is intended only for the use of the addressee(s) to this email and is confidential. If you are not an intended recipient or acting on behalf of an intended recipient, any review, disclosure, conversion to hard copy, dissemination, reproduction or other use of any part of this communication is strictly prohibited. If you receive this communication in error or without authorization, please notify the originator immediately and remove it from your system.
-- AF mailing list AF@af.afmug.com http://af.afmug.com/mailman/listinfo/af_af.afmug.com
