I also use EoIP tunnels and L2TP IPsec tunnels successfully, but I'm looking at more efficient L2 options as well.
Juniper suggests public Internet L2 connections using "VPLS over GRE over IPsec" in this document: http://www.juniper.net/documentation/en_US/release-independent/solutions/information-products/pathway-pages/dci-vpls-o-gre-o-ipsec.pdf It seems unnecessarily complex, but MikroTik does support each. I haven't had a chance to test efficiency yet. ------------------------------ On Wed, Jun 7, 2017 at 6:18 AM, Faisal Imtiaz <fai...@snappytelecom.net> wrote: > You might find this article of interest. > > http://www.stubarea51.net/2015/10/16/10-gbps-of-layer-2- > throughput-is-possible-using-mikrotiks-eoip-tunnel/ > > > Regards. > > Faisal Imtiaz > Snappy Internet & Telecom > 7266 SW 48 Street > Miami, FL 33155 > Tel: 305 663 5518 x 232 <(305)%20663-5518> > > Help-desk: (305)663-5518 <(305)%20663-5518> Option 2 or Email: > supp...@snappytelecom.net > > ------------------------------ > > *From: *"Steve Jones" <thatoneguyst...@gmail.com> > *To: *af@afmug.com > *Sent: *Tuesday, June 6, 2017 10:27:03 PM > *Subject: *Re: [AFMUG] Need a better mikrotik tunnel than EOIP > > I'm going to CCR1072s Hopefully the issue resolves > > On Tue, Jun 6, 2017 at 5:45 PM, Chris Wright <ch...@velociter.net> wrote: > >> I get a hair over 200mbps over encrypted EOIP on a pair of CCR1036’s with >> no optimizing (can they be optimized, anyone?). >> >> >> >> Chris Wright >> >> Network Administrator >> >> >> >> *From:* Af [mailto:af-boun...@afmug.com] *On Behalf Of *Steve Jones >> *Sent:* Tuesday, June 06, 2017 3:30 PM >> *To:* af@afmug.com >> *Subject:* [AFMUG] Need a better mikrotik tunnel than EOIP >> >> >> >> For whatever reason, my tunnel has collapsed. throughput went from a >> consistent 80 percent of our limiting upstream (100mbps) now over 10 and it >> goes latency shit >> >> I don't know if its the tunnel as a singularity or if its saturation of >> the upstream causing some issues >> >> Fuckall when you have super asymmetric bandwidth and saturate the little >> one >> >> >> >> EOIP had too much overhead to run encryption on the rb1100ahx2, we are >> switching to the CCRs now so it my be better, but I'm finding for external >> transit, EOIP doesn't seem to be the right hammer >> > >
