C
C
CityCat42017-09-18 08:03:51
Computer networks
CityCat4, 2017-09-18 08:03:51

Won't Layer7 increase the load on Mikrotik?

Blocking WinX telemetry over IP. This is not very convenient, programmers often complain that sites with MS services get blocked (which is logical - telemetry for MS is the same service :D). I want to make a rule with blocking through Layer7. Does using Layer7 increase load? Mikrotik RB2011. Haven't used it before, didn't need it.

Answer the question

In order to leave comments, you need to log in

2 answer(s)
V
Viktor Belsky, 2017-09-18
@CityCat4

Yes, the L7 filter significantly increases the load on the piece of iron. Here is an excerpt from the site.
Note: The L7 matcher is very resource intensive. Use this feature only for very specific traffic. It is not recommended to use L7 matcher for generic traffic, such as for blocking webpages. This will almost never work correctly and your device will exhaust it's resources, trying to catch all the traffic. Use other features to block webpages by URL.
Although, if the router is not heavily loaded, then you can try.

S
Sergey, 2017-10-19
@SuNbka

CityCat4 , you can share your experience in blocking telemetry,
when I tried to block telemetry, users had problems with zakupki.gov.ru.
^.+(vortex.data.microsoft.com|vortex-win.data.microsoft.com|
telecommand.telemetry.microsoft.com|telecommand.telemetry.microsoft.com.nsatc.net|oca.telemetry.microsoft.com|
oca.telemetry.microsoft.com.nsatc.net|sqm.telemetry.microsoft.com|sqm.telemetry.microsoft.com.nsatc.net|
watson.telemetry.microsoft.com|watson.telemetry.microsoft.com.nsatc.net|redir.metaservices.microsoft.com|
choice.microsoft.com|choice.microsoft.com.nsatc.net|df.telemetry.microsoft.com|
reports.wes.df.telemetry.microsoft.com|wes.df.telemetry.microsoft.com|services.wes.df.telemetry.microsoft.com|
sqm.df.telemetry.microsoft.com|telemetry.microsoft.com|watson.ppe.telemetry.microsoft.com|telemetry.appex.bing.net|
telemetry.urs.microsoft.com|telemetry.appex.bing.net|settings-sandbox.data.microsoft.com|
vortex-sandbox.data.microsoft.com|survey.watson.microsoft.com|watson.live.com|watson.microsoft.com|
statsfe2.ws.microsoft.com|corpext.msitadfs.glbdns2.microsoft.com|compatexchange.cloudapp.net|cs1.wpc.v0cdn.net|
a-0001.a-msedge.net|statsfe2.update.microsoft.com.akadns.net|diagnostics.support.microsoft.com|
corp.sts.microsoft.com|statsfe1.ws.microsoft.com|pre.footprintpredict.com|i1.services.social.microsoft.com|
i1.services.social.microsoft.com.nsatc.net|feedback.windows.com|feedback.microsoft-hohm.com|
feedback.search.microsoft.com|rad.msn.com|preview.msn.com|ad.doubleclick.net|ads.msn.com|
ads1.msads.net|ads1.msn.com|a.ads1.msn.com|a.ads2.msn.com|adnexus.net|adnxs.com|
az361816.vo.msecnd.net|az512334.vo.msecnd.net).*$

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question