Я использую RB3011 с двумя провайдерами: 140 Мбит/с + 105 Мбит/с. Роутер работал на стабильной версии 7.1, теперь на 7.1.1 стабильной. Однако при нагрузке всего в 245 Мбит/с, балансировка нагрузки вызывает рост использования CPU до 75-85%. Раньше, на версии 6, максимум доходило до 35-45%. Пожалуйста, проверьте мою конфигурацию PCC и подскажите, не создают ли мои правила mangle излишнюю нагрузку на процессор, и есть ли альтернативный синтаксис для снижения нагрузки. И ещё, если я хочу использовать fastrack, то где лучше разместить правила для него?
[kalpak@home-lab] /ip/firewall/mangle> print
Flags: X - отключено, I - недействительно; D - динамическое
0 chain=prerouting action=mark-connection new-connection-mark=exclude_conn passthrough=yes src-address-list=own-lan dst-address-list=bypass-list log=no log-prefix=“”
1 chain=prerouting action=mark-routing new-routing-mark=main passthrough=yes connection-mark=exclude_conn log=no log-prefix=“”
2 chain=input action=mark-connection new-connection-mark=abspl_out_conn passthrough=yes in-interface=ether2
3 chain=output action=mark-routing new-routing-mark=abspl-inbound passthrough=no connection-mark=abspl_out_conn
4 chain=input action=mark-connection new-connection-mark=sswl_out_conn passthrough=yes in-interface=ether4
5 chain=output action=mark-routing new-routing-mark=sswl-inbound passthrough=no connection-mark=sswl_out_conn
6 chain=forward action=mark-connection new-connection-mark=abspl_out_pfw passthrough=no connection-state=new in-interface=ether2
7 chain=prerouting action=mark-routing new-routing-mark=abspl-inbound passthrough=no connection-mark=abspl_out_pfw in-interface-list=lans
8 chain=forward action=mark-connection new-connection-mark=sswl_out_pfw passthrough=no connection-state=new in-interface=ether4
9 chain=prerouting action=mark-routing new-routing-mark=sswl-inbound passthrough=no connection-mark=sswl_out_pfw in-interface-list=lans
10 chain=prerouting action=accept in-interface=ether2
11 chain=prerouting action=accept in-interface=ether4
12 chain=prerouting action=mark-connection new-connection-mark=abspl_conn passthrough=yes dst-address-type=!local connection-mark=!exclude_conn per-connection-classifier=both-addresses-and-ports:2/0 log=no log-prefix=“”
13 chain=prerouting action=mark-connection new-connection-mark=sswl_conn passthrough=yes dst-address-type=!local connection-mark=!exclude_conn per-connection-classifier=both-addresses-and-ports:2/1 log=no log-prefix=“”
14 chain=prerouting action=mark-routing new-routing-mark=abspl-outbound passthrough=yes connection-mark=abspl_conn in-interface-list=lans
15 chain=prerouting action=mark-routing new-routing-mark=sswl-outbound passthrough=yes connection-mark=sswl_conn in-interface-list=lans
[kalpak@home-lab] /ip/firewall/mangle> print
Flags: X - отключено, I - недействительно; D - динамическое
0 chain=prerouting action=mark-connection new-connection-mark=exclude_conn passthrough=yes src-address-list=own-lan dst-address-list=bypass-list log=no log-prefix=“”
1 chain=prerouting action=mark-routing new-routing-mark=main passthrough=yes connection-mark=exclude_conn log=no log-prefix=“”
2 chain=input action=mark-connection new-connection-mark=abspl_out_conn passthrough=yes in-interface=ether2
3 chain=output action=mark-routing new-routing-mark=abspl-inbound passthrough=no connection-mark=abspl_out_conn
4 chain=input action=mark-connection new-connection-mark=sswl_out_conn passthrough=yes in-interface=ether4
5 chain=output action=mark-routing new-routing-mark=sswl-inbound passthrough=no connection-mark=sswl_out_conn
6 chain=forward action=mark-connection new-connection-mark=abspl_out_pfw passthrough=no connection-state=new in-interface=ether2
7 chain=prerouting action=mark-routing new-routing-mark=abspl-inbound passthrough=no connection-mark=abspl_out_pfw in-interface-list=lans
8 chain=forward action=mark-connection new-connection-mark=sswl_out_pfw passthrough=no connection-state=new in-interface=ether4
9 chain=prerouting action=mark-routing new-routing-mark=sswl-inbound passthrough=no connection-mark=sswl_out_pfw in-interface-list=lans
10 chain=prerouting action=accept in-interface=ether2
11 chain=prerouting action=accept in-interface=ether4
12 chain=prerouting action=mark-connection new-connection-mark=abspl_conn passthrough=yes dst-address-type=!local connection-mark=!exclude_conn per-connection-classifier=both-addresses-and-ports:2/0 log=no log-prefix=“”
13 chain=prerouting action=mark-connection new-connection-mark=sswl_conn passthrough=yes dst-address-type=!local connection-mark=!exclude_conn per-connection-classifier=both-addresses-and-ports:2/1 log=no log-prefix=“”
14 chain=prerouting action=mark-routing new-routing-mark=abspl-outbound passthrough=yes connection-mark=abspl_conn in-interface-list=lans
15 chain=prerouting action=mark-routing new-routing-mark=sswl-outbound passthrough=yes connection-mark=sswl_conn in-interface-list=lans
