7412 worse IDS/ IPS performance (router is only using 2 CPU cores not all 4)

7412 worse IDS/ IPS performance (router is only using 2 CPU cores not all 4)

7412 worse IDS/ IPS performance (router is only using 2 CPU cores not all 4)
7412 worse IDS/ IPS performance (router is only using 2 CPU cores not all 4)
2 weeks ago - last edited 2 weeks ago
Model: ER7412-M2  
Hardware Version: V1
Firmware Version: 1.01

I bought a few weeks ago the TP Link ER7412-M2 router cause I needed a better IDS/ IPS performance for my FTTH internet connection..
I noticed now when I turn it on the performance is a little bit better than the performance of the ER707-M2 which I had before but only by 20mbit/s..
Basically when it is turned off I have a download of 350mbit/s when it is turned on "only 180-200" not my question is since the router has 4 cores why does it use only 2 CPU cores for the IDS/IPS?
Could you please fix that issue by a firmware update since 200 mbit/s IDS/IPS performance is not so well even not for the fact it coasts more than the ER707-M2 and it has 2 more CPU cores..

 

EDIT:

https://community.tp-link.com/en/business/forum/topic/712558

Here someone posted it should have 520mbit/s +- now I ask myself what did I configure wrong/ what do I need to change, at first I used it in standalone mode now I use it in controller mode, if it matters.

  0      
  0      
#1
Options
7 Reply
Re:7412 worse IDS/ IPS performance (router is only using 2 CPU cores not all 4)
2 weeks ago

  @Julian2111 

 

Some IDS/IPS options use much more CPU horsepower than others - do you have every option turned on ?

  0  
  0  
#2
Options
Re:7412 worse IDS/ IPS performance (router is only using 2 CPU cores not all 4)
2 weeks ago - last edited 2 weeks ago

  @GRL 

7 of 12 are turned on

P2P and Internet Traffic is turned off the rest on..

[Here is a Screenshot]

Basically if anyone has any idea please tell me, maybe I'm doing something wrong

 

Edit: If you disable both of "Hacking" I get through around 290 which is takable but still, is there no way to use all 4 CPU cores instead of only 2?

and also in my opinion especially there it would be good to make it possible with a firmware update because hacking is probably a big part why people (like me) use IPS/ IDS, of course for DShield too

  0  
  0  
#3
Options
Re:7412 worse IDS/ IPS performance (router is only using 2 CPU cores not all 4)
2 weeks ago - last edited 2 weeks ago

Hi @Julian2111 

Thanks for posting in our business forum.

Julian2111 wrote

I bought a few weeks ago the TP Link ER7412-M2 router cause I needed a better IDS/ IPS performance for my FTTH internet connection..
I noticed now when I turn it on the performance is a little bit better than the performance of the ER707-M2 which I had before but only by 20mbit/s..
Basically when it is turned off I have a download of 350mbit/s when it is turned on "only 180-200" not my question is since the router has 4 cores why does it use only 2 CPU cores for the IDS/IPS?
Could you please fix that issue by a firmware update since 200 mbit/s IDS/IPS performance is not so well even not for the fact it coasts more than the ER707-M2 and it has 2 more CPU cores..

 

EDIT:

https://community.tp-link.com/en/business/forum/topic/712558

Here someone posted it should have 520mbit/s +- now I ask myself what did I configure wrong/ what do I need to change, at first I used it in standalone mode now I use it in controller mode, if it matters.

Read this regarding the core: Differences Between Router and Switch

 

Do the WAN LAN iperf or chariot. Paste the screenshot of the speed result.

And remember to erase all other settings like ACL, load balancing, bandwidth control or any speed limit functions. They all require the CPU.

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update!Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.
  0  
  0  
#4
Options
Re:7412 worse IDS/ IPS performance (router is only using 2 CPU cores not all 4)
a week ago

  @Clive_A 

Thanks for your reply. Yes I know the difference between a router and a switch.

If I download testfiles from Hetzner I can use all speed I have [around 340-330mbit/s]

BUT: as said with ookla's speedtest not..

Now I tried download a game in Steam same thing turning IPS/ IDS off it is again only slower.

At the end I turned it off and it works [see the screenshot when the line goes up], if I look in the omada controller in my statistics for the CPU utilisation I see the router maximum going to 52% CPU usage.. when I ran the router before in Standalone mode you could see Core 1 and Core 2 100% the other cores were not used.. that was my point, and no it is not steam I tested that now like 10 times.

Before you ask everything else is turned off as you mentioned, besides ACL because I need one rule that says my Main Devices are able to access my IOT VLAN the rest is off.

My point was more is there no way to fix that by a firmware update since the router would definetly has the performance to get around 380-420 stable through it if would use all 4 CPU cores.

I mean if you want to I can post 10 screenshots or a video of showing it, also the CPU statistics, that wouldn't be the problem.. but in the end I can not change more settings than I did. I mean it does not have to get fixed immediately would be just very cool if it could get fixed by one of the next firmware updates. I personally thing it is just a firmware thing because my previous router the 707-M2 had the exact same throughput just 2 less CPU cores and the router has 2 more but does not use them.

  0  
  0  
#5
Options
Re:7412 worse IDS/ IPS performance (router is only using 2 CPU cores not all 4)
a week ago

Hi @Julian2111 

Thanks for posting in our business forum.

Julian2111 wrote

  @Clive_A 

Thanks for your reply. Yes I know the difference between a router and a switch.

If I download testfiles from Hetzner I can use all speed I have [around 340-330mbit/s]

BUT: as said with ookla's speedtest not..

Now I tried download a game in Steam same thing turning IPS/ IDS off it is again only slower.

 

At the end I turned it off and it works [see the screenshot when the line goes up], if I look in the omada controller in my statistics for the CPU utilisation I see the router maximum going to 52% CPU usage.. when I ran the router before in Standalone mode you could see Core 1 and Core 2 100% the other cores were not used.. that was my point, and no it is not steam I tested that now like 10 times.

Before you ask everything else is turned off as you mentioned, besides ACL because I need one rule that says my Main Devices are able to access my IOT VLAN the rest is off.

My point was more is there no way to fix that by a firmware update since the router would definetly has the performance to get around 380-420 stable through it if would use all 4 CPU cores.

I mean if you want to I can post 10 screenshots or a video of showing it, also the CPU statistics, that wouldn't be the problem.. but in the end I can not change more settings than I did. I mean it does not have to get fixed immediately would be just very cool if it could get fixed by one of the next firmware updates. I personally thing it is just a firmware thing because my previous router the 707-M2 had the exact same throughput just 2 less CPU cores and the router has 2 more but does not use them.

Using all the cores or not does not mean it will affect the speed.

As you described that you have tried the controller mode, and it says 52%. Does it display the per core or just a value for all cores?

 

There is no feedback that this model cannot reach the advertised IDS speed. My point is that if you tested it wrong. The methodology is wrong at first and the rest of the discussion does not make sense if it was the case.

 

I don't care what websites you used but I only want to know the iperf or chariot. All the data we have listed are based on a lab environment where we can control the variables.

You use speed ookla or whatsoever the speed tester is, they are servers based on the Internet and many other aspects can affect the speed result, which makes it out of accuracy.

 

I think this is in the verification phase of your methodology. Not entering the phase of "dev gotta fix this right now". At least you should do it in a lab-controlled environment and it can be reproduced steadily and everything else can be ruled out.

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update!Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.
  0  
  0  
#6
Options
Re:7412 worse IDS/ IPS performance (router is only using 2 CPU cores not all 4)
a week ago

Hi @Julian2111

Julian2111 wrote

  @Clive_A 

Thanks for your reply. Yes I know the difference between a router and a switch.

If I download testfiles from Hetzner I can use all speed I have [around 340-330mbit/s]

BUT: as said with ookla's speedtest not..

Now I tried download a game in Steam same thing turning IPS/ IDS off it is again only slower.

 

At the end I turned it off and it works [see the screenshot when the line goes up], if I look in the omada controller in my statistics for the CPU utilisation I see the router maximum going to 52% CPU usage.. when I ran the router before in Standalone mode you could see Core 1 and Core 2 100% the other cores were not used.. that was my point, and no it is not steam I tested that now like 10 times.

Before you ask everything else is turned off as you mentioned, besides ACL because I need one rule that says my Main Devices are able to access my IOT VLAN the rest is off.

My point was more is there no way to fix that by a firmware update since the router would definetly has the performance to get around 380-420 stable through it if would use all 4 CPU cores.

I mean if you want to I can post 10 screenshots or a video of showing it, also the CPU statistics, that wouldn't be the problem.. but in the end I can not change more settings than I did. I mean it does not have to get fixed immediately would be just very cool if it could get fixed by one of the next firmware updates. I personally thing it is just a firmware thing because my previous router the 707-M2 had the exact same throughput just 2 less CPU cores and the router has 2 more but does not use them.

I don't know if you actually read the article. It is telling you that there is a concept of NPU.

Though IDS should be CPU-based, more cores do not mean it has to use them all at once. They may be reserved for other purposes. It is a matter of core scheduling by the development team. They have their consideration on this.

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update!Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.
  1  
  1  
#7
Options
Re:7412 worse IDS/ IPS performance (router is only using 2 CPU cores not all 4)
a week ago - last edited a week ago

  @Clive_A 

Hi Clive_A,

As said before all tests I did showed that during different times.. the point is not/ was not to blame or say the router is bad or that has to be fixed the next month.. I just pointed that out. Also since I tried different speed tests, also downloading games and that, I even connected my FritzBox which I haven't used for over a year, there I get every time the full speed through, same if I disable IDS/ IPS on the ER7412, in the moment I enable I do not get the speed through.. and I heavily doubt it is always the speed tests fault I tried to almost every day/ night time was always the same..

If you say that is not professional enough ok.. I will try if I have the time for it setting your "professional" enviroment up.. basically in many years I work as network engineer it would heavily surprise me if these tests will show something else than multiple tests of what I did, but yeah it is understandable if you need closer data e.g. when it is slower/ when it is not affected.
Two last things I say for now I never said " dev gotta fix this right now" just said it would be cool, but since you/ they need more details I will try the methods you mentioned and the other thing was since I use it now in controller mode I can only see the CPU load of all cores, in standalone mode it showed the load of the single cores.


Also let this being said for me it does not really matter what it is after testing that as said before 24/7 it is just fact that the router is not letting more through with IDS/ IPS.. not even going to test some other things since I tested so many.. if you say it is always the others servers, ok but even the speedtest from my provider showed the same result multiple times during entire days lol. For me it also does not matter why it is just the fact it is limited by software in that case, if that is wanted or not is not really interesting for me, at least not in that case since it's for me private not for business.

  0  
  0  
#8
Options

Information

Helpful: 0

Views: 255

Replies: 7

Related Articles