How to speed up mikrotik?

Question

VPN

Gentlemen, I really need your help.
There is such a piece of iron MikroTik RB2011UAS-2HnD-IN, there is a gigabit Internet.
Everything is set up, everything works. but there are some problems.
1) It cuts the Internet channel very much
Speed ​​when connected directly 500-600 Mbps to speedtest.net
Via Mikrotik not higher than 200. At the same time, the load on the Mikrotik processor is 100.
2) Problems with wifi. That is, it does not exist. Plus, it works fine on some devices, but on others through one place.
Hence there are questions. Set up your Mikrotik as best you can. Since I suspect that the channel goes down because of the firewall.
Where can you read about it. So that it was not stupidly read, put, but with an understanding of what you are doing.
Interested in setting up wifi, vpn (l2tp/ipsec) and firewall.
I understand perfectly well that this is a huge layer of material, but when you need to start

Answer 1

One of those cases when you really need to buy another piece of iron. Gigabit is there, alas, for the role of the switch. Although the iron itself is good.
By wifi - first, turn on the Advanced radio settings mode, set wifi to work only on 802.11 protocols, play with the transmitter power. Then google mana for radio tuning in MT. But to be sure, immediately open the device and make sure that the heat sink from the chips is good - MT still has a problem with this.
PS By the way, now, with firmware 6.29, an interesting feature "FastTrack" has appeared - perhaps it will come in handy for you. Look at their forum, forum.mikrotik.com/viewtopic.php?f=21&t=96302 , and watch the presentation (the link is in the same topic, but I will take it out separately) - www.mikrotik.com/download/share/FastTrack. pdf .

Answer 2

but nothing that the processor (CPU Atheros AR9344 600MHz) can not process more than 100 megabits there? within the limits of the first switch the gig carries (AR8327Gigabit Switch), but as a switch, the second only weave (AR9344).
You can only distribute this gigabit, but do not drive through the percentage.
here is
cykey.ca/~cykey/airport/AR9344.pdf
_

Answer 3

First of all, update the hardware firmware. It 's here . Wiki mikrotika (Russian, written a little), but the official wiki is better . There is also a forum .
By subject, you probably have a lot of rules in the firewall to handle. Maybe long chains of rules.

Answer 4

In general, this Mikrotik can stretch such traffic through itself?

Answer 5

Through NAT, on this piece of iron, you can’t drag more than 350 meters in any way (each packet is processed there). The way out is either to use ipv6 or to remove NAT (in fact, in both cases - to remove NAT).
About Wi-Fi, you need to understand why it is, that is, not, maybe as a range, maybe a load, maybe interference, maybe the setting is really not correct.

Answer 6

Enable FastTrack check in the connection state as in the screenshot and then the connection state will not be processed by the Router, which will reduce the CPU load by 40 percent