Hi Matt, There is a good example including script sample on the MikroTik wiki - it applies the NAT in stages so that CPU load is minimal. Keep in mind that the NAT table lookup is triggered only once at the start of the connection (including tracked udp connections) so overhead is quite lower than you might expect :) https://wiki.mikrotik.com/wiki/Manual:IP/Firewall/NAT#Carrier-Grade_NAT_.28C... We use this technique quite often for cases where data retention traceability is required with NAT, and performance is perfectly OK :) Cheers! Mike.
-----Original Message----- From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of Matt Perkins Sent: Wednesday, 1 August 2018 4:31 PM To: MikroTik Australia Public List <public@talk.mikrotik.com.au> Subject: [MT-AU Public] CGN Nat 444 on CCR1072
Hi All,
I have been tasked with implementing NAT444 on a 1072 does anybody have any idea what the expected throughput would be with 65025 NAT rules.
Matt.
-- /* Matt Perkins Direct 1300 137 379 Spectrum Networks Ptd. Ltd. Office 1300 133 299 matt@spectrum.com.au Level 6, 350 George Street Sydney 2000 Spectrum Networks is a member of the Communications Alliance & TIO */
_______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au