7412 worse IDS/ IPS performance (router is only using 2 CPU cores not all 4)
I bought a few weeks ago the TP Link ER7412-M2 router cause I needed a better IDS/ IPS performance for my FTTH internet connection..
I noticed now when I turn it on the performance is a little bit better than the performance of the ER707-M2 which I had before but only by 20mbit/s..
Basically when it is turned off I have a download of 350mbit/s when it is turned on "only 180-200" not my question is since the router has 4 cores why does it use only 2 CPU cores for the IDS/IPS?
Could you please fix that issue by a firmware update since 200 mbit/s IDS/IPS performance is not so well even not for the fact it coasts more than the ER707-M2 and it has 2 more CPU cores..
EDIT:
https://community.tp-link.com/en/business/forum/topic/712558
Here someone posted it should have 520mbit/s +- now I ask myself what did I configure wrong/ what do I need to change, at first I used it in standalone mode now I use it in controller mode, if it matters.
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
Some IDS/IPS options use much more CPU horsepower than others - do you have every option turned on ?
- Copy Link
- Report Inappropriate Content
7 of 12 are turned on
P2P and Internet Traffic is turned off the rest on..
[Here is a Screenshot]
Basically if anyone has any idea please tell me, maybe I'm doing something wrong
Edit: If you disable both of "Hacking" I get through around 290 which is takable but still, is there no way to use all 4 CPU cores instead of only 2?
and also in my opinion especially there it would be good to make it possible with a firmware update because hacking is probably a big part why people (like me) use IPS/ IDS, of course for DShield too
- Copy Link
- Report Inappropriate Content
Hi @Julian2111
Thanks for posting in our business forum.
Julian2111 wrote
I bought a few weeks ago the TP Link ER7412-M2 router cause I needed a better IDS/ IPS performance for my FTTH internet connection..
I noticed now when I turn it on the performance is a little bit better than the performance of the ER707-M2 which I had before but only by 20mbit/s..
Basically when it is turned off I have a download of 350mbit/s when it is turned on "only 180-200" not my question is since the router has 4 cores why does it use only 2 CPU cores for the IDS/IPS?
Could you please fix that issue by a firmware update since 200 mbit/s IDS/IPS performance is not so well even not for the fact it coasts more than the ER707-M2 and it has 2 more CPU cores..
EDIT:
https://community.tp-link.com/en/business/forum/topic/712558
Here someone posted it should have 520mbit/s +- now I ask myself what did I configure wrong/ what do I need to change, at first I used it in standalone mode now I use it in controller mode, if it matters.
Read this regarding the core: Differences Between Router and Switch
Do the WAN LAN iperf or chariot. Paste the screenshot of the speed result.
And remember to erase all other settings like ACL, load balancing, bandwidth control or any speed limit functions. They all require the CPU.
- Copy Link
- Report Inappropriate Content
Thanks for your reply. Yes I know the difference between a router and a switch.
If I download testfiles from Hetzner I can use all speed I have [around 340-330mbit/s]
BUT: as said with ookla's speedtest not..
Now I tried download a game in Steam same thing turning IPS/ IDS off it is again only slower.
At the end I turned it off and it works [see the screenshot when the line goes up], if I look in the omada controller in my statistics for the CPU utilisation I see the router maximum going to 52% CPU usage.. when I ran the router before in Standalone mode you could see Core 1 and Core 2 100% the other cores were not used.. that was my point, and no it is not steam I tested that now like 10 times.
Before you ask everything else is turned off as you mentioned, besides ACL because I need one rule that says my Main Devices are able to access my IOT VLAN the rest is off.
My point was more is there no way to fix that by a firmware update since the router would definetly has the performance to get around 380-420 stable through it if would use all 4 CPU cores.
I mean if you want to I can post 10 screenshots or a video of showing it, also the CPU statistics, that wouldn't be the problem.. but in the end I can not change more settings than I did. I mean it does not have to get fixed immediately would be just very cool if it could get fixed by one of the next firmware updates. I personally thing it is just a firmware thing because my previous router the 707-M2 had the exact same throughput just 2 less CPU cores and the router has 2 more but does not use them.
- Copy Link
- Report Inappropriate Content
Hi @Julian2111
Thanks for posting in our business forum.
Julian2111 wrote
Thanks for your reply. Yes I know the difference between a router and a switch.
If I download testfiles from Hetzner I can use all speed I have [around 340-330mbit/s]
BUT: as said with ookla's speedtest not..
Now I tried download a game in Steam same thing turning IPS/ IDS off it is again only slower.
At the end I turned it off and it works [see the screenshot when the line goes up], if I look in the omada controller in my statistics for the CPU utilisation I see the router maximum going to 52% CPU usage.. when I ran the router before in Standalone mode you could see Core 1 and Core 2 100% the other cores were not used.. that was my point, and no it is not steam I tested that now like 10 times.
Before you ask everything else is turned off as you mentioned, besides ACL because I need one rule that says my Main Devices are able to access my IOT VLAN the rest is off.
My point was more is there no way to fix that by a firmware update since the router would definetly has the performance to get around 380-420 stable through it if would use all 4 CPU cores.
I mean if you want to I can post 10 screenshots or a video of showing it, also the CPU statistics, that wouldn't be the problem.. but in the end I can not change more settings than I did. I mean it does not have to get fixed immediately would be just very cool if it could get fixed by one of the next firmware updates. I personally thing it is just a firmware thing because my previous router the 707-M2 had the exact same throughput just 2 less CPU cores and the router has 2 more but does not use them.
Using all the cores or not does not mean it will affect the speed.
As you described that you have tried the controller mode, and it says 52%. Does it display the per core or just a value for all cores?
There is no feedback that this model cannot reach the advertised IDS speed. My point is that if you tested it wrong. The methodology is wrong at first and the rest of the discussion does not make sense if it was the case.
I don't care what websites you used but I only want to know the iperf or chariot. All the data we have listed are based on a lab environment where we can control the variables.
You use speed ookla or whatsoever the speed tester is, they are servers based on the Internet and many other aspects can affect the speed result, which makes it out of accuracy.
I think this is in the verification phase of your methodology. Not entering the phase of "dev gotta fix this right now". At least you should do it in a lab-controlled environment and it can be reproduced steadily and everything else can be ruled out.
- Copy Link
- Report Inappropriate Content
Hi @Julian2111
Julian2111 wrote
Thanks for your reply. Yes I know the difference between a router and a switch.
If I download testfiles from Hetzner I can use all speed I have [around 340-330mbit/s]
BUT: as said with ookla's speedtest not..
Now I tried download a game in Steam same thing turning IPS/ IDS off it is again only slower.
At the end I turned it off and it works [see the screenshot when the line goes up], if I look in the omada controller in my statistics for the CPU utilisation I see the router maximum going to 52% CPU usage.. when I ran the router before in Standalone mode you could see Core 1 and Core 2 100% the other cores were not used.. that was my point, and no it is not steam I tested that now like 10 times.
Before you ask everything else is turned off as you mentioned, besides ACL because I need one rule that says my Main Devices are able to access my IOT VLAN the rest is off.
My point was more is there no way to fix that by a firmware update since the router would definetly has the performance to get around 380-420 stable through it if would use all 4 CPU cores.
I mean if you want to I can post 10 screenshots or a video of showing it, also the CPU statistics, that wouldn't be the problem.. but in the end I can not change more settings than I did. I mean it does not have to get fixed immediately would be just very cool if it could get fixed by one of the next firmware updates. I personally thing it is just a firmware thing because my previous router the 707-M2 had the exact same throughput just 2 less CPU cores and the router has 2 more but does not use them.
I don't know if you actually read the article. It is telling you that there is a concept of NPU.
Though IDS should be CPU-based, more cores do not mean it has to use them all at once. They may be reserved for other purposes. It is a matter of core scheduling by the development team. They have their consideration on this.
- Copy Link
- Report Inappropriate Content
Hi Clive_A,
As said before all tests I did showed that during different times.. the point is not/ was not to blame or say the router is bad or that has to be fixed the next month.. I just pointed that out. Also since I tried different speed tests, also downloading games and that, I even connected my FritzBox which I haven't used for over a year, there I get every time the full speed through, same if I disable IDS/ IPS on the ER7412, in the moment I enable I do not get the speed through.. and I heavily doubt it is always the speed tests fault I tried to almost every day/ night time was always the same..
If you say that is not professional enough ok.. I will try if I have the time for it setting your "professional" enviroment up.. basically in many years I work as network engineer it would heavily surprise me if these tests will show something else than multiple tests of what I did, but yeah it is understandable if you need closer data e.g. when it is slower/ when it is not affected.
Two last things I say for now I never said " dev gotta fix this right now" just said it would be cool, but since you/ they need more details I will try the methods you mentioned and the other thing was since I use it now in controller mode I can only see the CPU load of all cores, in standalone mode it showed the load of the single cores.
Also let this being said for me it does not really matter what it is after testing that as said before 24/7 it is just fact that the router is not letting more through with IDS/ IPS.. not even going to test some other things since I tested so many.. if you say it is always the others servers, ok but even the speedtest from my provider showed the same result multiple times during entire days lol. For me it also does not matter why it is just the fact it is limited by software in that case, if that is wanted or not is not really interesting for me, at least not in that case since it's for me private not for business.
- Copy Link
- Report Inappropriate Content
Information
Helpful: 0
Views: 255
Replies: 7
Voters 0
No one has voted for it yet.