Re: [AFMUG] Need to replace CCR1072 being used for NAT

2021-07-13 Thread Steven Kenney
Yep and Mikrotik won't touch it. Even though there is plenty of memory and resources available. It seems to be the 1 million connection mark when things go bad. On Tue, Jul 13, 2021 at 8:57 AM Adam Moffett wrote: > The issue becomes apparent when you exceed ~3gbps traffic > On 7/12/2021 8:07 P

Re: [AFMUG] Need to replace CCR1072 being used for NAT

2021-07-13 Thread Adam Moffett
The issue becomes apparent when you exceed ~3gbps traffic On 7/12/2021 8:07 PM, Steve Jones wrote: we do limited NAT in ours with BGP, but we dont go over 2gbs. We recently finished deploying all our new ARIN IP space so we have very little NAT. Never had the issue, but thats not a statement th

Re: [AFMUG] Need to replace CCR1072 being used for NAT

2021-07-12 Thread Steve Jones
we do limited NAT in ours with BGP, but we dont go over 2gbs. We recently finished deploying all our new ARIN IP space so we have very little NAT. Never had the issue, but thats not a statement that it doesnt happen, its more a statement of we stopped NAT before traffic got to the point it did happ

Re: [AFMUG] Need to replace CCR1072 being used for NAT

2021-07-12 Thread Josh Luthman
That's what I've heard, too. The 1072 doesn't like NAT and/or connection tracking. Josh Luthman 24/7 Help Desk: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Mon, Jul 12, 2021 at 3:05 PM Steve Jones wrote: > as I understand it its an issue with the 1072s specifi

Re: [AFMUG] Need to replace CCR1072 being used for NAT

2021-07-12 Thread Steve Jones
as I understand it its an issue with the 1072s specifically On Mon, Jul 12, 2021 at 1:49 PM Matt wrote: > Is it something specific with the CCR1072? We have been using the > CCR1036 units for quite a while and have had no issues. Not doing NAT > but doing BGP and firewalling etc. > > On Mon, Jul

Re: [AFMUG] Need to replace CCR1072 being used for NAT

2021-07-12 Thread Matt
Is it something specific with the CCR1072? We have been using the CCR1036 units for quite a while and have had no issues. Not doing NAT but doing BGP and firewalling etc. On Mon, Jul 12, 2021 at 1:22 PM castarritt wrote: > > We have had a CCR1072 doing all our NAT for years, but lately it has bee

[AFMUG] Need to replace CCR1072 being used for NAT

2021-07-12 Thread castarritt
We have had a CCR1072 doing all our NAT for years, but lately it has been unstable. Obviously, we can't just turn off connection tracking, so it looks like we will be replacing it. We are looking at switching to a CHR solution, but we don't know what kind of hardware would be ideal, or how perfor