How to get an acceptable speed on Mikrotik with a provider's tariff of 1 gigabit?

Question

Computer networks

Hello.
There is a piece of iron CRS109-8G-1S-2HnD , which will happen as a gateway to the Internet. A wAP ac piece of iron is connected to it via ethernet cat5e , which plays the role of a WiFi access point. From my macbook pro I cling to a wifi point at a frequency of 5ghz, measure the speed and get around 350 megabits / s, which is very far from a real gigabit. If I connect with a laptop directly to the provider's cable, then it gives out honest 900 megabits / s.
I sinned on the firewall on the gateway, so I crashed all the rules except for NAT and FastTrack, but this did not help.
RouterOS version 6.46
Here is the gateway config:

/interface bridge
add admin-mac=E4:8D:8C:9D:E8:CD auto-mac=no comment=defconf name=bridge
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-XX disabled=no distance=indoors frequency=auto installation=indoor mode=ap-bridge ssid=gateway \
    wireless-protocol=802.11
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=dynamic-keys supplicant-identity=MikroTik wpa-pre-shared-key=**** wpa2-pre-shared-key=****
/ip pool
add name=dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge name=defconf
/interface bridge port
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=ether6
add bridge=bridge comment=defconf interface=ether7
add bridge=bridge comment=defconf interface=ether8
add bridge=bridge comment=defconf interface=sfp1
add bridge=bridge comment=defconf interface=wlan1
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
add interface=ether2 list=WAN
/ip address
add address=192.168.88.1/24 comment=defconf interface=ether3 network=192.168.88.0
/ip dhcp-client
add comment=defconf default-route-distance=2 interface=ether1 use-peer-dns=no
add default-route-distance=4 disabled=no interface=ether2 use-peer-dns=no
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes servers=1.1.1.1
/ip dns static
add address=192.168.88.1 name=router.lan
/ip firewall filter
add action=fasttrack-connection chain=forward connection-state=established,related
add action=accept chain=forward connection-state=established,related
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface-list=WAN
/lcd interface pages
set 0 interfaces=wlan1
/system clock
set time-zone-name=Europe/Moscow
/system identity
set name="Floor#0(GW)"
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN

Here is the access point config:

/interface bridge
add comment=defconf fast-forward=no name=bridge
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n country=russia disabled=no distance=indoors frequency=2457 frequency-mode=regulatory-domain mode=ap-bridge radio-name=tik ssid=\
    home-sweet-home wireless-protocol=802.11 wmm-support=enabled wps-mode=disabled
set [ find default-name=wlan2 ] band=5ghz-a/n/ac channel-width=20/40/80mhz-Ceee country="united states" disabled=no distance=indoors frequency=auto mode=ap-bridge ssid=\
    home-sweet-home-5ghz wireless-protocol=802.11
/interface ethernet
set [ find default-name=ether1 ] speed=100Mbps
/interface list
add exclude=dynamic name=discover
add name=mactel
add name=mac-winbox
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk eap-methods="" group-key-update=30m mode=dynamic-keys supplicant-identity=MikroTik wpa-pre-shared-key=**** \
    wpa2-pre-shared-key=****
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=default-dhcp authoritative=after-2sec-delay interface=bridge name=defconf
/system logging action
add email-start-tls=yes email-to=**** name=email target=email
/interface bridge port
add bridge=bridge comment=defconf interface=wlan1
add bridge=bridge comment=defconf interface=wlan2
add bridge=bridge hw=no interface=ether1
/ip neighbor discovery-settings
set discover-interface-list=discover
/interface list member
add interface=wlan1 list=discover
add interface=wlan2 list=discover
add interface=bridge list=discover
add interface=bridge list=mactel
add interface=bridge list=mac-winbox
/ip address
add address=192.168.88.1/24 comment=defconf disabled=yes interface=bridge network=192.168.88.0
/ip dhcp-client
add comment=defconf disabled=no interface=bridge
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1 netmask=24
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 name=gateway.local
/ip service
set telnet disabled=yes
set ftp disabled=yes
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/ip ssh
set allow-none-crypto=yes forwarding-enabled=remote
/system clock
set time-zone-name=Europe/Moscow
/system identity
set name=Floor#1
/system logging
add disabled=yes topics=wireless,debug
/system ntp client
set enabled=yes primary-ntp=85.21.78.23 secondary-ntp=185.68.101.10
/tool e-mail
set address=smtp.yandex.ru from=**** password="****" port=587 start-tls=yes user=****
/tool mac-server
set allowed-interface-list=mactel
/tool mac-server mac-winbox
set allowed-interface-list=mac-winbox

Answer 1

802.11ac gives ~ 350 Mbps per antenna (according to the standard 433 Mbps, but this is in hyper-ideal conditions). Wangyu poppy has only one antenna at 5GHz, so the speed will not be higher in any way
And CRS as a router is a fig choice, it will not pull out normally gigabit with a firewall, you need at least rb750gr3

Answer 2

This is not a router problem (although routers are very different), but WiFi. We read Wikipedia (not covered yet) and see that https://ru.wikipedia.org/wiki/IEEE_802.11n
And you only have two antennas, it seems. Oops.. And gross is plus 20% net.
And

The actual data rate is always less than the channel rate. For Wi-Fi, the actual data transfer rate is usually more than twice as low[6].
In addition, there are several other factors that limit the real throughput:
The channel is always shared between clients;
When transmitting service traffic, the access point always adjusts to the client operating at the minimum speed;
The presence of interference (access points working nearby, microwave ovens, baby monitors, bluetooth devices, cordless phones);
It is worth noting that when working in the 802.11b standard or when providing a mode compatible with it, there are only three non-overlapping channels, that is, which do not interfere with each other (usually these are the 1st, 6th and 11th). That is, if a neighbor behind the wall has an access point on the 1st channel, and at your house on the 3rd, then these access points will interfere with each other, thereby reducing the data transfer rate.

Oh yes. A lot more depends on the purity of the ether, obstacles, attenuation and other crap. So if you want quality and speed - cable!

Answer 3

350 megabits over Wi-Fi is already very good. The more concrete walls and neighboring Wi-Fi between you and the point, the worse your result. Want speed - pull the wire.

Answer 4

This is wifi broadcast, it is common to everyone within a certain number of channels. A speed of 350 is normal.

Answer 5

From my macbook pro I cling to a wifi point

What is the maximum wifi speed the laptop supports? (it is necessary to look at those documentation on it).
Write what you got, most interesting.