Laptop wise - a decent core i7 machine ... 8gb ram ssd etc.etc.

Firewall wise - Meraki MX100 - but no traffic shape / content filter / anything really applied yet ... its just out the box and letting me down a bit already which is a shame as their AP's are great! - even their little mx60 firewalls on adsl connections are good - but give it some decent bandwidth and it just seems to break...

That�s strange, reading the specification for the Meraki MX100, it should be able to handle 500Mbps with a basic configuration (it might be lower with Layer 7, QOS activated).

If you connect your laptop to the leased line directly, what results do you get from the Think Broadband speed test? Are you able to post a link to the results please?

Also your laptop is more than capable of running the Think Broadband speed test.

In reply to a post by kev_445:

That�s strange, reading the specification for the Meraki MX100, it should be able to handle 500Mbps with a basic configuration (it might be lower with Layer 7, QOS activated).

Agree ..

If you connect your laptop to the leased line directly, what results do you get from the Think Broadband speed test? Are you able to post a link to the results please?

Also your laptop is more than capable of running the Think Broadband speed test.

I know
http://www.thinkbroadband.com/speedtest/results.html...

http://www.thinkbroadband.com/speedtest/results.html...

Still think its CPU limitation on the firewall even though it shows as being capable.. that or a poor installation/design of squid which it uses at its proxy causing this.

Post deleted by kev_445

Those results definitely seem more reliable / stable�

Proxy servers are typically very CPU intensive, with the connection speed and device you have, it�s going to provide little if not a detrimental effect on your connection�

Are you able to turn off the web caching (I think it's call WAN Optimization)?

Edited by deleted (Fri 07-Feb-14 15:10:02)

agree again

Proxy is built in, it'll always use it - that's how it can content filter ... WAN optimisation is something different .. it'll compress/cache files between two devices (i.e. site to site vpn) to speed up file transfers.

Proxy should cope with 500 Mbps throughput though (250Mb if i was to malware/av scan everything and IDS traffic via the built in kaspersky/snort engines - but they are both disabled and I still see the performance hit.)

Guess i'll just wait for Cisco to get back to me with one of their techs to discuss why the unit is having these limitations.

Best of luck getting it resolved.

This may not be of any use, however I would definitely recommend the Watchguard line of firewalls. We use the Watchguard XTM 515 and it handles our 100Mb leased line without issue, it�s rated up to 1.5Gb AV throughput, so it should still handle your 250Mb connection without issue.

We�re upgrading to a 1Gb leased line shortly, so we�ll see how it handles that!

http://www.watchguard.com/products/xtm-5/compare.asp...

Hah - thanks..

Love Cisco Merkai stuff though (usually!), I'm currently managing over 2,500 access points, 137 offices connected all via VPN and almost 6,000 network switch ports over 17 different countries.

I can do complete layer7 traffic shaping down to per device profiles if necessary and then follow that device to any network it connects to of ours and apply the same shaping profiles - and I can manage and do all the above from a single web-browser anywhere in the world .. I've made changes on a plane, on a beach, in a pub ..in hotels room etc..etc.

Can't do that with any other kit ...


Anyway - well of topic ... thanks for your responses .. its kept me from the boredom of staring at bandwidth graphs that aren't looking like they should ..

Good luck with your upgrades.

Edited by deleted (Fri 07-Feb-14 18:10:27)

Some pub, that has either a beech or a beach inside it .

In reply to a post by Tam:

and I'm too lazy to really go through all the search results on here to find if anyone has seen slow x6 speeds which relate to CPU limitations on a firewall/router they are using

try this current thread
http://forums.thinkbroadband.com/fibre/t/4295587-ftt...