Mikrotik CRS125-24G-1S cuts internet speed over LAN. How to be?

Question

network hardware

There is a Mikrotik CRS125-24G-1S. The provider provides Internet via PPTP 50 megabits. But the speed of the Internet does not exceed 10 megabits, and sometimes it does not hurt at all 2-3. We tried another provider that provides Internet according to statics - the situation is the same. BT test outputs stable 80 - 90 megabits, but if you set the direction both parameter, it outputs 2-3 megabits and the grid starts to slow down terribly. I updated the firmware, it didn't help.
Config:

# jan/11/2017 15:11:59 by RouterOS 6.38
# software id = XVXP-QSEJ
#
/interface bridge
add name=bridge1 protocol-mode=none
/interface ethernet
set [ find default-name=ether1 ] advertise=100M-full,1000M-full \
    auto-negotiation=no name=ether1-master
set [ find default-name=ether2 ] advertise=100M-half,100M-full \
    auto-negotiation=no master-port=ether1-master
set [ find default-name=ether3 ] advertise=100M-half,100M-full \
    auto-negotiation=no master-port=ether1-master
set [ find default-name=ether4 ] advertise=100M-half,100M-full \
    auto-negotiation=no master-port=ether1-master
set [ find default-name=ether5 ] advertise=100M-half,100M-full \
    auto-negotiation=no master-port=ether1-master
set [ find default-name=ether6 ] advertise=100M-half,100M-full \
    auto-negotiation=no master-port=ether1-master
set [ find default-name=ether7 ] advertise=100M-half,100M-full \
    auto-negotiation=no master-port=ether1-master
set [ find default-name=ether8 ] advertise=100M-half,100M-full \
    auto-negotiation=no master-port=ether1-master speed=10Mbps
set [ find default-name=ether9 ] advertise=100M-half,100M-full \
    auto-negotiation=no master-port=ether1-master
set [ find default-name=ether10 ] advertise=100M-full,1000M-full master-port=\
    ether1-master
set [ find default-name=ether11 ] advertise=100M-half,100M-full \
    auto-negotiation=no master-port=ether1-master
set [ find default-name=ether12 ] advertise=100M-half,100M-full \
    auto-negotiation=no master-port=ether1-master
set [ find default-name=ether13 ] advertise=100M-full,1000M-full master-port=\
    ether1-master
set [ find default-name=ether14 ] advertise=100M-half,100M-full \
    auto-negotiation=no master-port=ether1-master
set [ find default-name=ether15 ] advertise=100M-half,100M-full \
    auto-negotiation=no master-port=ether1-master
set [ find default-name=ether16 ] advertise=100M-half,100M-full \
    auto-negotiation=no master-port=ether1-master
set [ find default-name=ether17 ] advertise=100M-half,100M-full \
    auto-negotiation=no master-port=ether1-master
set [ find default-name=ether18 ] advertise=100M-half,100M-full \
    auto-negotiation=no master-port=ether1-master
set [ find default-name=ether19 ] advertise=100M-half,100M-full \
    auto-negotiation=no master-port=ether1-master
set [ find default-name=ether20 ] advertise=100M-half,100M-full master-port=\
    ether1-master
set [ find default-name=ether21 ] advertise=100M-half,100M-full \
    auto-negotiation=no master-port=ether1-master
set [ find default-name=ether22 ] advertise=10M-full,100M-full \
    auto-negotiation=no master-port=ether1-master speed=10Mbps
set [ find default-name=ether23 ] advertise=100M-full,1000M-full \
    auto-negotiation=no comment="TV-Sputnik WAN"
set [ find default-name=ether24 ] advertise=100M-full comment="INTERMAX WAN"
/interface pptp-client
add allow=chap connect-to=****** disabled=no name=pptp-out1 \
/ip pool
add name=dhcp_pool1 ranges=192.168.10.2-192.168.10.254
add name=dhcp_pool3 ranges=192.168.0.2-192.168.1.254
/ip dhcp-server
add address-pool=dhcp_pool1 disabled=no interface=bridge1 lease-time=1d10m \
    name=dhcp1
/ppp profile
set *FFFFFFFE change-tcp-mss=no use-upnp=no
/interface bridge port
add bridge=bridge1 interface=ether1-master
/ip address
add address=192.168.10.1/23 interface=bridge1 network=192.168.10.0
/ip dhcp-client
add default-route-distance=0 dhcp-options=hostname,clientid interface=ether23
add add-default-route=no dhcp-options=hostname,clientid disabled=no \
    interface=ether24
/ip dhcp-server lease
add address=192.168.10.253 client-id=1:20:89:84:db:e7:46 mac-address=\
    20:89:84:DB:E7:46 server=dhcp1
add address=192.168.10.252 client-id=1:6c:f0:49:cb:ec:d4 mac-address=\
    6C:F0:49:CB:EC:D4 server=dhcp1
add address=192.168.10.251 client-id=1:94:de:80:98:20:27 mac-address=\
    94:DE:80:98:20:27 server=dhcp1
add address=192.168.10.250 client-id=1:0:90:fb:2f:a0:9e mac-address=\
    00:90:FB:2F:A0:9E server=dhcp1
add address=192.168.10.249 client-id=1:c4:e9:84:3:e2:a5 mac-address=\
    C4:E9:84:03:E2:A5 server=dhcp1
add address=192.168.10.248 client-id=1:e8:de:27:a6:c9:3d mac-address=\
    E8:DE:27:A6:C9:3D server=dhcp1
add address=192.168.10.247 client-id=1:2c:56:dc:98:58:9e mac-address=\
    2C:56:DC:98:58:9E server=dhcp1
add address=192.168.10.246 client-id=1:0:50:b6:b:29:ce mac-address=\
    00:50:B6:0B:29:CE server=dhcp1
add address=192.168.10.245 always-broadcast=yes client-id=1:40:e2:30:4b:ec:67 \
    mac-address=40:E2:30:4B:EC:67 server=dhcp1
add address=192.168.10.7 comment="Printer Holod Zex" mac-address=\
    44:A8:C2:00:90:58 server=dhcp1
add address=192.168.10.8 comment="Printer Pizza" mac-address=\
    44:A8:C2:00:E7:2F server=dhcp1
add address=192.168.10.9 comment="Printer Chudu" mac-address=\
    00:19:17:91:2C:C0 server=dhcp1
add address=192.168.10.10 comment="Printer Dostavka" mac-address=\
    00:19:17:91:2E:33 server=dhcp1
add address=192.168.10.11 comment="Printer Bar" mac-address=00:01:03:80:DF:F1 \
    server=dhcp1
add address=192.168.10.12 comment="Printer Shashliyk" mac-address=\
    44:A8:C2:00:E7:B5 server=dhcp1
/ip dhcp-server network
add address=192.168.0.0/23 dns-server=192.168.0.1 gateway=192.168.0.1
add address=192.168.10.0/23 dns-server=192.168.10.1 gateway=192.168.10.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
/ip firewall filter
add action=drop chain=input dst-port=53 in-interface=pptp-out1 protocol=udp
add action=accept chain=forward dst-address=192.168.10.100 dst-port=3080-3083 \
    out-interface=ether24 protocol=tcp
/ip firewall nat
add action=masquerade chain=srcnat out-interface=pptp-out1
add action=dst-nat chain=dstnat comment=Asterisk dst-port=6000-20000 \
    protocol=udp src-address=193.201.229.19 to-addresses=192.168.11.221 \
    to-ports=6000-20000
add action=dst-nat chain=dstnat comment="Asterisk UPD" dst-port=6000-20000 \
    protocol=udp to-addresses=192.168.11.221 to-ports=6000-20000
add action=dst-nat chain=dstnat comment=Asterisk dst-port=5060 protocol=tcp \
    to-addresses=192.168.11.221 to-ports=5060
add action=dst-nat chain=dstnat dst-port=5060 protocol=udp src-address=\
    193.201.229.19 to-addresses=192.168.11.221 to-ports=5060
add action=dst-nat chain=dstnat comment=Trassir dst-port=3080-3083 protocol=\
    tcp to-addresses=192.168.10.100 to-ports=3080-3083
add action=dst-nat chain=dstnat dst-port=8080 protocol=tcp to-addresses=\
    192.168.10.100 to-ports=8080
add action=dst-nat chain=dstnat dst-port=555 protocol=tcp to-addresses=\
    192.168.10.100 to-ports=555
add action=dst-nat chain=dstnat dst-port=8000 protocol=tcp to-addresses=\
    192.168.5.100 to-ports=8000
add action=dst-nat chain=dstnat dst-port=8200 protocol=tcp to-addresses=\
    192.168.10.100 to-ports=8200
add action=dst-nat chain=dstnat comment=RDP dst-port=3389 protocol=tcp \
    to-addresses=192.168.10.252 to-ports=3389
/ip firewall service-port
set sip sip-direct-media=no
/ip route
add distance=1 gateway=pptp-out1
add distance=1 dst-address=******* gateway=ether24
add distance=1 dst-address=192.168.0.253/32 gateway=ether24
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
/lcd
set time-interval=hour
/system clock
set time-zone-autodetect=no time-zone-name=Europe/Moscow
/system routerboard settings
# Warning: cpu overclocked
# Warning: memory overclocked
set cpu-frequency=650MHz
/system scheduler
add interval=30s name=chek_inet on-event=script-check-inet policy=\
    ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=\
    may/16/2016 start-time=23:30:00
/tool bandwidth-server
set authenticate=no

Answer 1

Because CRS is a managed switch with router firmware and it does not have enough power to distribute the Internet, you need a real router from the rb / ccr line