www.glcnetworks.com
Fastpath
GLC webinar, 29 june 2017
Achmad Mardiansyah
achmad@glcnetworks.com
GLC Networks, Indonesia
1
www.glcnetworks.com
Agenda
● Introduction
● Mikrotik fasttrack / fastpath
● Demo
● Q & A
2
www.glcnetworks.com
What is GLC?
● Garda Lintas Cakrawala (www.glcnetworks.com)
● An Indonesian company
● Located in Bandung
● Areas: Training, IT Consulting
● Mikrotik Certified Training Partner/Consultant/Distributor
● Ubiquiti Certified Trainer/Consultant
● RedHat Certified Trainer
3
www.glcnetworks.com
About GLC webinar?
● First webinar: january 1, 2010 (title:
tahun baru bersama solaris - new
year with solaris OS)
● As a sharing event with various
topics: linux, networking, wireless,
database, programming, etc
● Regular schedule: every 2 weeks
● Irregular schedule: as needed
● Checking schedule:
http://www.glcnetworks.com/main/sc
hedule
● You are invited to be a presenter
○ No need to be an expert
○ This is a forum for sharing: knowledge,
experiences, information
4
www.glcnetworks.com
Trainer Introduction
● Name: Achmad Mardiansyah
● Base: bandung, Indonesia
● Linux user (since 1999), Mikrotik user (since 2007),
ubnt user (since 2011)
● Certified Trainer (Mikrotik, Ubiquiti, Redhat)
● Certified Consultant
● Work: Telco engineer, Sysadmin, PHP programmer,
and Lecturer
● Personal website: http://achmadjournal.com
● More info:
http://au.linkedin.com/in/achmadmardiansyah
5
www.glcnetworks.com
Please introduce yourself
● Your name
● Your company/university?
● Your networking experience?
● Your mikrotik experience?
● Your expectation from this course?
6
www.glcnetworks.com
Mikrotik Fastpath
7
www.glcnetworks.com 8
www.glcnetworks.com
Drawbacks of slowpath
● SLOW -> lower performance -> lower
packet per second
● Packets should go through many processing
post -> higher CPU usage
9
www.glcnetworks.com
Can we improve slowpath?
Yes -> fastpath
● Just skip the processing posts (in
case you dont use them)
● This will improve routerboard
performance
10
www.glcnetworks.com
Fastpath conditions (1)?
YES. fastpath will active if following conditions are met (aka. handler)
● IPv4 handler
○ firewal rules are not configured;
○ firewall address lists are not configured;
○ Simple and queue trees with parent=global are not configured;
○ no mesh, metarouter interface configuration;
○ sniffer, torch and traffic generator is not running;
○ connection tracking is not active;
○ ip accounting is disabled (/ip accounting enabled=no);
○ VRFs are not set (/ip route vrf is empty);
○ Hotspot is not used (/ip hostspot has no interfaces);
○ IpSec policies are not configured (ROS v6.8);
○ /tool mac-scan is not actively used;
○ /tool ip-scan is not actively used;
○ route cache must be enabled
○ /ip firewall connection tracking set enabled parameter has new auto value Which means that
connection tracking is disabled by default until firewall rules are added.
11
www.glcnetworks.com
Fastpath conditions (2)?
● IPv4 FastTrack handler
○ FastTrack is available on the devices with FastPath support.
● Traffic Generator handler
○ Traffic Generator fast path is automatically used for interfaces that support this feature.
● MPLS handler
○ MPLS fast path is automatically used for interfaces that support this feature.
○ Currently MPLS fast-path applies only to MPLS switched traffic
● Bridge handler
○ no bridge firewall rules (/interface bridge filter, /interface bridge nat) are configured,
○ /interface bridge settings use-ip-firwall=no,
○ no mesh, metarouter interface configuration,
○ sniffer, torch and traffic generator is not running,
12
www.glcnetworks.com
Is my routerboard supported by Fastpath?
● Almost all routerboard support fastpath
● To check physical interface: /interface print detail
13
www.glcnetworks.com
Fastpath supports virtual
interface?
Yes.
● more and more virtual interfaces will
be added to support fastpath
● To check: /interface print detail
○ Check “allow fast-path”
14
www.glcnetworks.com
How do i know the fastpath is
active?
/ip settings print
15
www.glcnetworks.com
Interested?
Just come to our
training...
Special price for webinar
attendees…
http://www.glcnetworks.c
om/main/schedule
16
www.glcnetworks.com
End of slides
● Thank you for your attention
● Please submit your feedback: http://bit.ly/glcfeedback
● Like our facebook page: “GLC networks”
● Slide: http://www.slideshare.net/r41nbuw
● Recording: https://www.youtube.com/channel/UCI611_IIkQC0rsLWIFIx_yg
● Stay tune with our schedule
17

Mikrotik fastpath

  • 1.
    www.glcnetworks.com Fastpath GLC webinar, 29june 2017 Achmad Mardiansyah achmad@glcnetworks.com GLC Networks, Indonesia 1
  • 2.
    www.glcnetworks.com Agenda ● Introduction ● Mikrotikfasttrack / fastpath ● Demo ● Q & A 2
  • 3.
    www.glcnetworks.com What is GLC? ●Garda Lintas Cakrawala (www.glcnetworks.com) ● An Indonesian company ● Located in Bandung ● Areas: Training, IT Consulting ● Mikrotik Certified Training Partner/Consultant/Distributor ● Ubiquiti Certified Trainer/Consultant ● RedHat Certified Trainer 3
  • 4.
    www.glcnetworks.com About GLC webinar? ●First webinar: january 1, 2010 (title: tahun baru bersama solaris - new year with solaris OS) ● As a sharing event with various topics: linux, networking, wireless, database, programming, etc ● Regular schedule: every 2 weeks ● Irregular schedule: as needed ● Checking schedule: http://www.glcnetworks.com/main/sc hedule ● You are invited to be a presenter ○ No need to be an expert ○ This is a forum for sharing: knowledge, experiences, information 4
  • 5.
    www.glcnetworks.com Trainer Introduction ● Name:Achmad Mardiansyah ● Base: bandung, Indonesia ● Linux user (since 1999), Mikrotik user (since 2007), ubnt user (since 2011) ● Certified Trainer (Mikrotik, Ubiquiti, Redhat) ● Certified Consultant ● Work: Telco engineer, Sysadmin, PHP programmer, and Lecturer ● Personal website: http://achmadjournal.com ● More info: http://au.linkedin.com/in/achmadmardiansyah 5
  • 6.
    www.glcnetworks.com Please introduce yourself ●Your name ● Your company/university? ● Your networking experience? ● Your mikrotik experience? ● Your expectation from this course? 6
  • 7.
  • 8.
  • 9.
    www.glcnetworks.com Drawbacks of slowpath ●SLOW -> lower performance -> lower packet per second ● Packets should go through many processing post -> higher CPU usage 9
  • 10.
    www.glcnetworks.com Can we improveslowpath? Yes -> fastpath ● Just skip the processing posts (in case you dont use them) ● This will improve routerboard performance 10
  • 11.
    www.glcnetworks.com Fastpath conditions (1)? YES.fastpath will active if following conditions are met (aka. handler) ● IPv4 handler ○ firewal rules are not configured; ○ firewall address lists are not configured; ○ Simple and queue trees with parent=global are not configured; ○ no mesh, metarouter interface configuration; ○ sniffer, torch and traffic generator is not running; ○ connection tracking is not active; ○ ip accounting is disabled (/ip accounting enabled=no); ○ VRFs are not set (/ip route vrf is empty); ○ Hotspot is not used (/ip hostspot has no interfaces); ○ IpSec policies are not configured (ROS v6.8); ○ /tool mac-scan is not actively used; ○ /tool ip-scan is not actively used; ○ route cache must be enabled ○ /ip firewall connection tracking set enabled parameter has new auto value Which means that connection tracking is disabled by default until firewall rules are added. 11
  • 12.
    www.glcnetworks.com Fastpath conditions (2)? ●IPv4 FastTrack handler ○ FastTrack is available on the devices with FastPath support. ● Traffic Generator handler ○ Traffic Generator fast path is automatically used for interfaces that support this feature. ● MPLS handler ○ MPLS fast path is automatically used for interfaces that support this feature. ○ Currently MPLS fast-path applies only to MPLS switched traffic ● Bridge handler ○ no bridge firewall rules (/interface bridge filter, /interface bridge nat) are configured, ○ /interface bridge settings use-ip-firwall=no, ○ no mesh, metarouter interface configuration, ○ sniffer, torch and traffic generator is not running, 12
  • 13.
    www.glcnetworks.com Is my routerboardsupported by Fastpath? ● Almost all routerboard support fastpath ● To check physical interface: /interface print detail 13
  • 14.
    www.glcnetworks.com Fastpath supports virtual interface? Yes. ●more and more virtual interfaces will be added to support fastpath ● To check: /interface print detail ○ Check “allow fast-path” 14
  • 15.
    www.glcnetworks.com How do iknow the fastpath is active? /ip settings print 15
  • 16.
    www.glcnetworks.com Interested? Just come toour training... Special price for webinar attendees… http://www.glcnetworks.c om/main/schedule 16
  • 17.
    www.glcnetworks.com End of slides ●Thank you for your attention ● Please submit your feedback: http://bit.ly/glcfeedback ● Like our facebook page: “GLC networks” ● Slide: http://www.slideshare.net/r41nbuw ● Recording: https://www.youtube.com/channel/UCI611_IIkQC0rsLWIFIx_yg ● Stay tune with our schedule 17