Enabling "IPTraffic (per IP monitoring)" Problem

[iPrey06]

When I enable the traffic analyzer feature "Enable IPTraffic (per IP monitoring)" my speed about gets cut in half.

I go from ~880 Mbps to ~444 Mbps after I enable.

Removing the per IP monitoring and rebooting the router will restore ~880 Mbps speeds.


Why & fix or something I am doing incorrectly?

Images:
Before -- https://gyazo.com/53fc1c793cbac2a27ef0ffd8bab35b06
After -- https://gyazo.com/b4b023ad208df3fa94df8333fd323faa

 

[ColinTaylor]

Why & fix or something I am doing incorrectly?

Because enabling IPTraffic disables hardware acceleration.

 

[iPrey06]

Forgive me for being noob, but, I don't know how hardware acceleration works with routers.

My old linksys router never had this problem. But.. Not sure if it had hardware acceleration. Certainty it didn't monitor traffic.
But the speed never suffered.

So.. It's either have monitoring or have speed?




Sent from my SM-N950U using Tapatalk

 

[skeal]

Forgive me for being noob, but, I don't know how hardware acceleration works with routers.

My old linksys router never had this problem. But.. Not sure if it had hardware acceleration. Certainty it didn't monitor traffic.
But the speed never suffered.

So.. It's either have monitoring or have speed?




Sent from my SM-N950U using Tapatalk

Basically....yes. hardware acceleration is used for connections over 200mbs.

 

[ColinTaylor]

So.. It's either have monitoring or have speed?

Pretty much. But you don't say what router model or which firmware version.

 

[iPrey06]

Pretty much. But you don't say what router model or which firmware version.

Asus 88u

Merlin 384.4_2

Sent from my SM-N950U using Tapatalk

 

[iPrey06]

Basically....yes. hardware acceleration is used for connections over 200mbs.

Why does enabling per user traffic analysis need hardware acceleration off?

Sent from my SM-T817V using Tapatalk

 

[RMerlin]

Why does enabling per user traffic analysis need hardware acceleration off?

Because IPTraffic is implemented at the iptables level, and hardware acceleration bypasses portions of iptables - that's in part how it's able to achieve that speed gain.