Why are sites opening slowly through mikrotik with Wireguard?

Question

VPN

Good afternoon.
Tell me which way to think.
There is a VPS with RouteOS 7.1.3 installed there - two interfaces: ether1 (MTU 1500) and wireguard (MTU=1420). I use the network 198.0.0.1/24
There is a physical mikrotik client with RouteOS RouteOS 7.1.3 - it has a local network 192.168.0.1. I also made wireguard (MTU=1420). The connection between the client and the server is working, the pings are coming, the routing is configured. This client is connected to the Internet via pppoe (MTU = 1492).
The second client is an Android smartphone with the wireguard application - everything works perfectly.

Problem: If you try to access some sites by sending traffic along the route: PC - MicroClient - VPS - Internet, then the sites load very slowly, and some do not load at all. And through the WireGuard software, everything works quickly and without problems.
I read that the problem may be in MTU - but all attempts to configure it did not lead to anything ...
And the exact same problem was with L2TP + IPSec - sites also slowed down

Answer 1

router cpu loading?

Answer 2

ICMP as on a firewall is destroyed?
And inside wg runs only IPv4, or IPv6 too?
If (and) IPv6, then firstly, for a link with mtu 1492, mtu wg should be (no more) 1412, otherwise it won’t fit
Well, such IPv6 multihoming itself is not very easy to implement if there are no extra blocks of addresses and do not use non-Orthodox for v6 NAT

Answer 3

fasttrack enabled?

Answer 4

set on the client (PC) MTU not higher than MTU WG.
faced with similar, only I did not get a connection with servers using Qrator. At the same time, the connection passed correctly on the tick. When removing the dump, it turned out that SSL does not rise when connecting to sites. As a result, I decided to lower the MTU on the client (in my case 1420).

Answer 5

Do you have CHR there? Activate the license through your personal account on the MikroTik website.
By default, on CHR in free mode, all ports work at speeds up to 1Mbps