При нагрузки в рабочее время происходит повышение пинга

[dadawad]

Всем привет

Помогите пожалуйста, уже не знаю куда копать

Столкнулся с проблемой, в рабочее время при нагрузки повышается пинг временно, потом какое то время все хорошо и затем опять повышение, заметил что при повышении пинга у меня грузит cpu -80-100% (networking, management)
Уже отключил агригацию портов и включил L3 hw Offloading, на какое то время помогло, а затем ситуация повторилась

Модель роутера - CRS354-48G-4S+2Q+ RM. Version 7.4 (stable). Используется основным локальным шлюзом для всех устройств

Может что то с моей конфигурацией ?


# jun/08/2023 23:08:40 by RouterOS 7.4
# software id = 0BC8-X7W2
#
# model = CRS354-48G-4S+2Q+
# serial number = D8510ECDBD8E
/interface bridge
add admin-mac=2C:C8:1B:DE:68:89 auto-mac=no comment=defconf dhcp-snooping=yes igmp-snooping=yes name=bridge5 pvid=5 vlan-filtering=yes
/interface ethernet
set [ find default-name=ether41 ] disabled=yes
/interface vlan
add disabled=yes interface=bridge5 name=vlan1 vlan-id=1
add interface=bridge5 name=vlan5 vlan-id=5
add interface=bridge5 name=vlan10 vlan-id=10
add interface=bridge5 name=vlan15 vlan-id=15
add interface=bridge5 name=vlan20 vlan-id=20
add interface=bridge5 name=vlan30 vlan-id=30
add interface=bridge5 name=vlan50 vlan-id=50
/interface bonding
add mode=802.3ad name=l006 slaves=ether5,ether11
add mode=802.3ad name=l012 slaves=ether10,ether20
add disabled=yes mode=802.3ad name=nasl01 slaves=ether19,ether33
add mode=802.3ad name=nasl03 slaves=ether8,ether12,ether16,ether18
add disabled=yes mode=802.3ad name=qsfpplus1 slaves=qsfpplus1-3,qsfpplus1-4,qsfpplus1-1,qsfpplus1-2
add mode=802.3ad name=stock slaves=ether13,ether14,ether15,ether25,ether26,ether1,ether2
/interface ethernet switch
set 0 l3-hw-offloading=yes
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/port
set 0 name=serial0
/interface bridge port
add bridge=bridge5 comment=defconf disabled=yes interface=ether1 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether2 pvid=5
add bridge=bridge5 comment=defconf interface=ether3 pvid=5
add bridge=bridge5 comment=defconf interface=ether4 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether5 pvid=5
add bridge=bridge5 comment=defconf interface=ether6 pvid=5
add bridge=bridge5 comment=defconf interface=ether7 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether8 pvid=5
add bridge=bridge5 comment=defconf interface=ether9 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether10 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether11 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether12 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether13 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether14 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether15 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether16 pvid=5
add bridge=bridge5 comment=defconf interface=ether17 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether18 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether19 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether20 pvid=5
add bridge=bridge5 comment=defconf interface=ether21 pvid=5
add bridge=bridge5 comment=defconf interface=ether22 pvid=5
add bridge=bridge5 comment=defconf interface=ether23 pvid=5
add bridge=bridge5 comment=defconf interface=ether24 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether25 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether26 pvid=5
add bridge=bridge5 comment=defconf interface=ether27 pvid=5
add bridge=bridge5 comment=defconf interface=ether28 pvid=5
add bridge=bridge5 comment=defconf interface=ether29 pvid=5
add bridge=bridge5 comment=defconf interface=ether30 pvid=5 trusted=yes
add bridge=bridge5 comment=defconf interface=ether31 pvid=5
add bridge=bridge5 comment=defconf interface=ether32 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=ether33 pvid=5
add bridge=bridge5 comment=defconf interface=ether34 pvid=5
add bridge=bridge5 comment=defconf interface=ether35 pvid=5
add bridge=bridge5 comment=defconf interface=ether36 pvid=5 trusted=yes
add bridge=bridge5 comment=defconf interface=ether37 pvid=5
add bridge=bridge5 comment=defconf interface=ether38 pvid=5
add bridge=bridge5 comment=defconf interface=ether39 pvid=5
add bridge=bridge5 comment=defconf interface=ether40 pvid=5
add bridge=bridge5 comment=defconf interface=ether41 pvid=5
add bridge=bridge5 comment=defconf interface=ether42 pvid=5
add bridge=bridge5 comment=defconf interface=ether43 pvid=5
add bridge=bridge5 comment=defconf interface=ether44 pvid=5
add bridge=bridge5 comment=defconf interface=ether45 pvid=5
add bridge=bridge5 comment=defconf interface=ether46 pvid=5
add bridge=bridge5 comment=defconf interface=ether47 pvid=5
add bridge=bridge5 comment=defconf interface=ether48 pvid=5
add bridge=bridge5 comment=defconf interface=ether49 pvid=5
add bridge=bridge5 comment=defconf interface=qsfpplus1-1 pvid=5 trusted=yes
add bridge=bridge5 comment=defconf disabled=yes interface=qsfpplus1-2 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=qsfpplus1-3 pvid=5
add bridge=bridge5 comment=defconf disabled=yes interface=qsfpplus1-4 pvid=5
add bridge=bridge5 comment=defconf interface=qsfpplus2-1 pvid=5
add bridge=bridge5 comment=defconf interface=qsfpplus2-2 pvid=5
add bridge=bridge5 comment=defconf interface=qsfpplus2-3 pvid=5
add bridge=bridge5 comment=defconf interface=qsfpplus2-4 pvid=5
add bridge=bridge5 comment=defconf interface=sfp-sfpplus1 pvid=5
add bridge=bridge5 comment=defconf interface=sfp-sfpplus2 pvid=5
add bridge=bridge5 comment=defconf interface=sfp-sfpplus3 pvid=5
add bridge=bridge5 comment=defconf interface=sfp-sfpplus4 pvid=5 trusted=yes
add bridge=bridge5 interface=l006 pvid=5
add bridge=bridge5 interface=l012 pvid=5
add bridge=bridge5 interface=nasl03 pvid=5
add bridge=bridge5 interface=stock pvid=5
add bridge=bridge5 disabled=yes interface=*49 pvid=5
add bridge=bridge5 disabled=yes interface=nasl01 pvid=5
add bridge=bridge5 disabled=yes interface=qsfpplus1 pvid=5 trusted=yes
add bridge=bridge5 disabled=yes interface=*53 pvid=5
/ip firewall connection tracking
set enabled=no
/interface bridge vlan
add bridge=bridge5 vlan-ids=5
add bridge=bridge5 tagged=bridge5,ether1,ether9,ether19,ether22,ether23,ether24,ether27,stock,ether30,sfp-sfpplus4 vlan-ids=10
add bridge=bridge5 tagged=stock,ether9,ether22,ether23,ether24,ether27,bridge5,qsfpplus1-1 vlan-ids=15
add bridge=bridge5 tagged=ether9,ether22,ether23,ether24,ether27,stock,ether30,bridge5 vlan-ids=20
add bridge=bridge5 tagged=ether9,ether21,ether22,ether23,ether24,stock,ether28,bridge5,sfp-sfpplus4 vlan-ids=50
add bridge=bridge5 disabled=yes tagged=ether29,ether30,ether31,bridge5,l006,sfp-sfpplus4 vlan-ids=1
add bridge=bridge5 tagged=stock,ether9,ether21,ether22,ether23,ether24,ether27,bridge5,ether36,ether6,ether30,ether31,qsfpplus1-1 vlan-ids=30
/ip address
add address=10.0.0.42/24 comment=defconf interface=bridge5 network=10.0.0.0
add address=10.0.10.42/24 interface=vlan10 network=10.0.10.0
add address=10.1.10.42/23 interface=vlan15 network=10.1.10.0
add address=10.10.10.42/24 interface=vlan20 network=10.10.10.0
add address=192.168.22.200/24 disabled=yes interface=vlan1 network=192.168.22.0
add address=10.30.10.42/24 interface=vlan30 network=10.30.10.0
/ip dhcp-relay
add dhcp-server=10.100.10.1 disabled=no interface=vlan50 name=relay_vlan50
add dhcp-server=10.0.0.1 disabled=no interface=bridge5 name=relay_vlan5
add dhcp-server=10.0.10.1 disabled=no interface=vlan10 name=relay_vlan10
add dhcp-server=10.10.10.1 disabled=no interface=vlan20 name=relay_vlan20
add dhcp-server=10.1.10.1 disabled=no interface=vlan15 name=relay_vlan15
add dhcp-server=192.168.22.1 interface=vlan1 name=relay_vlan1
add dhcp-server=10.30.10.1 disabled=no interface=vlan30 name=relay_vlan30
/ip dns
set servers=10.0.0.11,10.0.0.12
/ip firewall filter
add action=drop chain=input comment="Drop Invalid connections" disabled=yes in-interface=!bridge5
add action=accept chain=input disabled=yes in-interface=!bridge5 log=yes log-prefix=debug-in
add action=accept chain=output comment=" " disabled=yes
add action=drop chain=input disabled=yes protocol=icmp
/ip route
add distance=1 gateway=10.0.0.59
add disabled=no distance=1 dst-address=192.168.0.0/24 gateway=10.0.0.69 pref-src="" routing-table=main scope=30 suppress-hw-offload=no target-scope=10
add disabled=no distance=1 dst-address=192.168.225.0/24 gateway=10.0.0.69 pref-src="" routing-table=main scope=30 suppress-hw-offload=no target-scope=10
add disabled=no distance=1 dst-address=192.168.6.0/24 gateway=10.0.0.69 pref-src="" routing-table=main scope=30 suppress-hw-offload=no target-scope=10
add disabled=no distance=1 dst-address=192.168.25.0/24 gateway=10.0.0.69 pref-src="" routing-table=main scope=30 suppress-hw-offload=no target-scope=10
/ip service
set telnet disabled=yes
set ftp disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/snmp
set enabled=yes trap-version=2
/system clock
set time-zone-name=Europe/Moscow
/system routerboard settings
set boot-os=router-os

[xvo]

Это L3-свитч, а не маршрутизатор.
Никакую серьезную нагрузку в качестве шлюза/сетевого экрана он не вытянет.
Покупайте роутер.