How to increase IKEv2 vpn connection speed on Mikrotik?

Question

Mikrotik

There is a Mikrotik RB-952Ui-5ac2nD-TC
IPsec connection is configured on it according to the guide https://support.surfshark.com/hc/en-us/articles/36...
vlan is raised on the wifi interface and redirection of all traffic is configured in the firewall from Ip pool vlan to ipsec to get a separate wi-fi network with vpn traffic at the output.
I get terrible speed and ping output. The CPU of mikrotik itself is practically at zero.
I installed strongswan separately on the phone and configured the same IKEv2 connection, the speed is excellent.
What could be the problem inside Mikrotik?
If necessary, I will provide all the logs and configs, from the start I don’t know what might be needed.

Answer 1

Like all software-encrypted Mikrotiks, IPSec will definitely slow down here. If the main use of a VPN is to take it with hardware encryption, for example RB760 (HEX S)
Well, besides, you need to look at the logs - maybe there is a constant reconnection. For example, I always turn off DPD - there is only one harm from it.

Answer 2

Good afternoon. the same problem. Same router, same vpn provider.
I found on the Mikrotik forum that you need to disable fasttrack. Disconnected and the speed rose to 20mbs. Above does not go, tried different servers. I put the program on the computer, everything flies (80 mbs).
Disabled dpd. I found an article that 3des encryption interferes, turned it off.
changed MSS to clamp to pmtu. It didn’t help either, I spent two days on the forums, tried different options by typing. ceiling 20mbs +- .