Thanks for your reply! My speedtests start at 1Gbit and cpu0 jumps up to 100% usage, then the speed drops and CPU usage falls with it. cpu1 is barely used. The fasttrack counter is incrementing. I also switched all my interface queues to only-hardware-queue from ethernet-default with pfifo (how my router shipped) but never noticed a difference.
Are there any optimizations I can make to my filter rules?
I was hoping not having to buy another router but I am considering it now.
> system resource cpu print
# CPU LOAD IRQ DISK
0 cpu0 100% 95% 0%
1 cpu1 2% 0% 0%
> tool profile cpu=all
NAME CPU USAGE
ethernet 0 59%
firewall 0 2.5%
networking 0 22%
winbox 0 0%
management 0 0%
routing 0 0%
ssl 0 0%
bridging 0 3.5%
unclassified 0 2%
cpu0 89%
lcd 1 0.5%
ethernet 1 5.5%
console 1 0%
firewall 1 0.5%
networking 1 2.5%
winbox 1 0%
management 1 1.5%
ssl 1 1%
internet-detect 1 0%
profiling 1 0%
bridging 1 0%
unclassified 1 1.5%
cpu1 13%
> ip settings print
ip-forward: yes
send-redirects: yes
accept-source-route: no
accept-redirects: no
secure-redirects: yes
rp-filter: no
tcp-syncookies: no
max-neighbor-entries: 8192
arp-timeout: 30s
icmp-rate-limit: 10
icmp-rate-mask: 0x1818
route-cache: yes
allow-fast-path: yes
ipv4-fast-path-active: no
ipv4-fast-path-packets: 0
ipv4-fast-path-bytes: 0
ipv4-fasttrack-active: yes
ipv4-fasttrack-packets: 878939818
ipv4-fasttrack-bytes: 109371873347