Mikrotik. L2TP. Is it possible to increase performance?

Question

System administration

There is Mikrotik 951G-2HnD (600 MHz), when connected via L2TP from Beeline and the maximum channel load (for example, at maximum load by the torrent client), the CPU load reaches 100%. At the same time, however, the speed is at the level of 100 Mbit. The new revision 6.35 (2016-Apr-14 12:55) states the following:
l2tp - implemented l2tp and lns fastpath/fasttrack support;
Is it possible somehow to reduce the load on the CPU with 100% utilization of the channel by using fastpath/fasttrack? If you have a similar Mikrotik 951G-2HnD, what is your maximum CPU usage at 100% using a 100 Mbit LT2P connection?

Answer 1

You can reduce the load, but the rest of the packet processing rules will not work

Answer 2

Not an answer to your question, but, Beeline generally refuses to use tunnels. You may want to opt out of l2tp if Beeline allows it in your area.
And also, in extreme cases, you can increase the frequency of the Microt processor and think about its active cooling.

Answer 3

>Is it possible somehow to reduce the load on the CPU with 100% utilization of the channel by using fastpath/fasttrack?
Yes, this should reduce the load, but packets will not be processed. It's better to read how it works here.
> at 100% using 100 Mbit LT2P connection?
It's not so much the speed that matters, how many connections you have.
Now I'm not ready to answer what the load is, but if it's interesting at night I can try to do tests without an l2tp channel.

Answer 4

Use fasttrack. If any rules should be applied to forward traffic, then raise them higher and assign the accept action. By doing this, you will drive traffic that needs further processing by the router into the "slowpath". Then create a rule

add action=fasttrack-connection chain=forward comment="fasttrack other" \
    connection-state=established,related

With this rule, packets will be transferred along the fastpath past the firewall and queues, reducing the load on the CPU.

Answer 5

Did I understand you correctly?
Those. judging by the number of packets in this rule, it applies and works, right?

Answer 6

Buddy 951 100% means that the tone is not so.
Judging by your screenshot, you need to optimize the firewall rules.
I have 751 in the 100mbit beeline pumped and did not even puff