Community discussions

MikroTik App
 
dadaniel
Member Candidate
Member Candidate
Posts: 220
Joined: Fri May 14, 2010 11:51 pm

Re: FastTrack - New feature in 6.29

Wed May 27, 2015 5:18 pm

best is to fasttrack connection-state=established,related
Is this fasttrack rule replacing the default "accept connection-state=established,related"-rule or do I still need it?
 
hedele
Member
Member
Posts: 338
Joined: Tue Feb 24, 2009 11:23 pm

Re: FastTrack - New feature in 6.29

Wed May 27, 2015 5:53 pm

My guess is you still need it, because not all connections can be fast-tracked. So you probably have to put the fast-track rule first, and a "normal" established/related accept rule afterwards to catch non-fasttrackable connections (like gre, ipsec-esp, icmp, etc...)
 
jarda
Forum Guru
Forum Guru
Posts: 7756
Joined: Mon Oct 22, 2012 4:46 pm

Re: FastTrack - New feature in 6.29

Wed May 27, 2015 8:53 pm

My guess is you still need it, because not all connections can be fast-tracked. So you probably have to put the fast-track rule first, and a "normal" established/related accept rule afterwards to catch non-fasttrackable connections (like gre, ipsec-esp, icmp, etc...)
This is good idea IMHO. Looking forward to test fasttrack soon.
 
User avatar
macgaiver
Forum Guru
Forum Guru
Posts: 1764
Joined: Wed May 18, 2005 5:57 pm
Location: Sol III, Sol system, Sector 001, Alpha Quadrant

Re: FastTrack - New feature in 6.29

Thu May 28, 2015 11:11 am

My guess is you still need it, because not all connections can be fast-tracked. So you probably have to put the fast-track rule first, and a "normal" established/related accept rule afterwards to catch non-fasttrackable connections (like gre, ipsec-esp, icmp, etc...)
This is also for connections that uses fasttrack, as far as i can see some of the packets are going the slow path to maintain all the timeouts and states in order.

As it was told in MUM presentation "fasttrack-connection" works similar to "connection-mark" so even when triggered, packet passes through to the next rule. Only following packets from this connection will go FastPath, one that triggered "fasttrack-connection" rule have to pass through in regular slow-path way.
 
User avatar
CyberTod
Long time Member
Long time Member
Posts: 510
Joined: Wed Jan 25, 2012 10:23 am

Re: FastTrack - New feature in 6.29

Thu May 28, 2015 1:21 pm

Is there some way to benefit from fasttrack if I am setting priority from dscp ?
/ip firewall mangle add action=set-priority chain=prerouting new-priority=from-dscp-high-3-bits
 
Netsplite
just joined
Posts: 8
Joined: Mon Dec 13, 2010 3:13 pm

Re: FastTrack - New feature in 6.29

Thu May 28, 2015 1:32 pm

Just tested on the CCR-1016 and it's working as expected, added "action=fastrack" to a few most used NAT rules to test it out and seeing less CPU usage but hard to tell the speed difference yet.
 
vortex
Forum Guru
Forum Guru
Posts: 1092
Joined: Sat Feb 16, 2013 6:10 pm

Re: FastTrack - New feature in 6.29

Thu May 28, 2015 9:34 pm

RB2011:

Before: 220-240Mbps at 100%
After: I saturate my 250Mbps pipe at 50%

Both with downstream traffic only.

I guess I am all set for when 500Mbps is offered (unless the jump would be straight to 1Gbps)
 
jarda
Forum Guru
Forum Guru
Posts: 7756
Joined: Mon Oct 22, 2012 4:46 pm

Re: FastTrack - New feature in 6.29

Fri May 29, 2015 2:34 pm

How to read this picture?
fasttrack.jpg
(all rules are without any conditions)
You do not have the required permissions to view the files attached to this post.
 
pateutz
Frequent Visitor
Frequent Visitor
Posts: 55
Joined: Wed Jan 11, 2012 5:55 pm

Re: FastTrack - New feature in 6.29

Fri May 29, 2015 3:37 pm

Hi all,


please verify the hardware support, not all the RouterBoards are supported ( for example RB450/RB450G are not supported )

List of devices with FastPath support
RouterBoard Interfaces
RB6xx series ether1,2
RB7xx series all ethernets
RB8xx series ether1,2
RB9xx series all ethernets
RB1000 all ethernets
RB1100 series ether1-10,11
RB2011 series all ethernets and sfp
CCR series routers all ethernets and sfps
All RouterBOARD devices wireless interfaces, if wireless-fp package used
x86 wireless interfaces, if wireless-fp package used

source : http://wiki.mikrotik.com/wiki/Manual:Fast_Path

Best Regards,

Daniell
 
jarda
Forum Guru
Forum Guru
Posts: 7756
Joined: Mon Oct 22, 2012 4:46 pm

Fri May 29, 2015 5:30 pm

Sure. It is rb750 and the fasttrack is indicated to be on.
 
n1am
just joined
Posts: 16
Joined: Tue Nov 04, 2014 12:00 pm

Re: FastTrack - New feature in 6.29

Fri May 29, 2015 7:09 pm

What about the CRS series?
 
moutian
just joined
Posts: 3
Joined: Sat Mar 15, 2014 3:03 pm

Re:

Fri May 29, 2015 7:14 pm

Sure. It is rb750 and the fasttrack is indicated to be on.
I have the same problem. According to the firewall filter table, lots of packets and bytes. However, "ip setting" shows 0 packets and 0 bytes for fastTrack (yes, it shows fasttrack active). So is fasttrack working or not?
 
pateutz
Frequent Visitor
Frequent Visitor
Posts: 55
Joined: Wed Jan 11, 2012 5:55 pm

Re: FastTrack - New feature in 6.29

Fri May 29, 2015 11:48 pm

Hi all,

i have verified tonight for Mikrotik CRS109-8G-1S-2HND-IN and Mikrotik CRS 125-24G-1S-2Hnd-in and the feature it's working.

Best Regards,

Daniel
 
jarda
Forum Guru
Forum Guru
Posts: 7756
Joined: Mon Oct 22, 2012 4:46 pm

Re: FastTrack - New feature in 6.29

Sat May 30, 2015 10:16 pm

Ok. I tried fasttrack in real situation and after few minutes I swithed it off.

First of all, the fasttracking firewall rules are showing nonesence counter values. And finally I have found that bypassed user queues are so much important for me that I cannot sacrifice them.

So, it works, speeds the throughput and spares CPU, but the side costs are too high.
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 26322
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: FastTrack - New feature in 6.29

Mon Jun 01, 2015 11:22 am

Ok. I tried fasttrack in real situation and after few minutes I swithed it off.

First of all, the fasttracking firewall rules are showing nonesence counter values. And finally I have found that bypassed user queues are so much important for me that I cannot sacrifice them.

So, it works, speeds the throughput and spares CPU, but the side costs are too high.
you don't need to fasttrack all, you need to mark specific traffic that you don't need to queue. also why nonsense counters ?
 
darkprocess
Member Candidate
Member Candidate
Posts: 249
Joined: Fri Mar 20, 2015 1:16 pm

Re: FastTrack - New feature in 6.29

Mon Jun 01, 2015 12:20 pm

Hello

Just a stupid question, i understand the benefits of using Fasttrack. Where can we found a simple explanation on how to implement it with some examples?

Thanks for your help
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 26322
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: FastTrack - New feature in 6.29

Mon Jun 01, 2015 12:41 pm

First page of this thread has the basic Firewall rules that you need: http://forum.mikrotik.com/viewtopic.php ... 76#p479776
 
jarda
Forum Guru
Forum Guru
Posts: 7756
Joined: Mon Oct 22, 2012 4:46 pm

FastTrack - New feature in 6.29

Mon Jun 01, 2015 5:18 pm

Well. I queue all traffic according to the user ip addresses. Then there is almost no possibility to use fasttrack. The statistics is nonsense because it uses only hits that were not able to be processed by the fasttracking rule even fulfilled its criteria. The same values show subsequent accepting rule also.
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 26322
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: FastTrack - New feature in 6.29

Tue Jun 02, 2015 11:51 am

Like others said before, this is not for devices where you queue all traffic. At home - I don't queue myself (why?). I simply want a LAN through NAT, and this gives me ability to have nearly 2x the speed I had before. For ISP this will not be a big benefit, unless they have unlimited VIP type of clients.

Let me give an example. Take the RB951G out of the box, don't alter the default config. Speedtest gives some 250Mbit. I add one Fasttrack rule - speedtest now gives 500Mbit (ISP doesn't give more). Simple.
 
mcdebugger
Frequent Visitor
Frequent Visitor
Posts: 50
Joined: Mon Oct 03, 2011 11:10 am

Re: FastTrack - New feature in 6.29

Tue Jun 02, 2015 12:18 pm

Seems like it's not working on PPTP and GRE interfaces of my RB2011. Do you plan to support fasttrack on GRE/PPTP/etc ?
It's a common practice when PPTP connection to ISP is used.
 
Fraction
Frequent Visitor
Frequent Visitor
Posts: 84
Joined: Wed Jan 16, 2013 9:42 pm
Location: Helsinki, Finland

Re: FastTrack - New feature in 6.29

Tue Jun 02, 2015 12:31 pm

It seems like FastTrack somehow disturbs my ssh/cifs server connections through IPSec-tunnel..

Ping still works as expected and I can even connect to suitable ports with telnet, but connecting with Putty (ssh) or Windows Explorer (CIFS) just hangs until timeout.. Anyhow, From IP/Firewall/Connection I can see established TCP-connection between client and server in both cases.. SSH to RB works fine, its just connections to servers behind my RB.

After disabling these 3 firewall rules everything works fine again:
0 X chain=forward action=fasttrack-connection connection-state=established,related log=no log-prefix=""
1 X chain=forward action=accept connection-state=established,related log=no log-prefix=""
2 X chain=forward action=drop connection-state=invalid log=no log-prefix=""

..but if I enable these again, problem comes back immediately (it also kills active ssh connections)..

Is anyone else noticed anything like this?

Not the biggest problem for me, because my RB2011UiAS-2HnD can handle my Internet connection pretty well also without FastTrack, but just a notice..
 
User avatar
macgaiver
Forum Guru
Forum Guru
Posts: 1764
Joined: Wed May 18, 2005 5:57 pm
Location: Sol III, Sol system, Sector 001, Alpha Quadrant

Re: FastTrack - New feature in 6.29

Tue Jun 02, 2015 1:10 pm

It seems like FastTrack somehow disturbs my ssh/cifs server connections through IPSec-tunnel..
Well FastTrack basically skips lots of processing steps, like firewall and queues, maybe it skips something IPSEc related also.
You just need to create more specific rule that excludes all IPsec traffic from FastTrack.

This is the reason it is implemented as firewall action, not an option that is enabled by default. One rule solution is not for your setup.

And Fastpath doesn't go together with IPSec :)
 
jarda
Forum Guru
Forum Guru
Posts: 7756
Joined: Mon Oct 22, 2012 4:46 pm

FastTrack - New feature in 6.29

Tue Jun 02, 2015 11:03 pm

As long as I have a plenty of cpu power, the fasttrack is not bringing any advantage to me. Only in case the standard processing will be slower than my needs I would maybe start thinking to fasttrack part of the traffic. Now I am fasttracking only the traffic within internal address ranges that doesn't help too much anyway.
 
User avatar
MTeeker
Frequent Visitor
Frequent Visitor
Posts: 96
Joined: Tue Jun 14, 2011 2:42 pm
Location: Australia

Re: FastTrack - New feature in 6.29

Thu Jun 04, 2015 1:24 am

The idea is to "fasttrack" some specific machine without slowing it's traffic for processing. Let's say you have a network of users, you have firewall and queues for them. But then you have a VIP customer (or your own PC) that you will not filter or slow down, and you want the best available speed for it. This is the situation for fasttrack.
FastTract allows a smoother streaming of a video on my home NAS, across the Net, over open VPN connection. I was not able to do this, prior to FastTract, without heavy breakups.

It's not that I normally watch a video over the vpn connection to home. But as a test of performance, it does 'fast tract'.

(My nominal home bandwidth is: 100mbps down, 2.4mbps up).

One thing though. The firewall rules preceding FastTract, are needed to drop invalid input, and new forward which is not dsn-natted for obvious reason.

On this point, do these rules still work when Bittorents are running?

It's a good feature from MikroTik. From where I sit.
Last edited by MTeeker on Thu Jun 04, 2015 9:02 am, edited 1 time in total.
 
User avatar
chechito
Forum Guru
Forum Guru
Posts: 2990
Joined: Sun Aug 24, 2014 3:14 am
Location: Bogota Colombia
Contact:

Re: FastTrack - New feature in 6.29

Thu Jun 04, 2015 8:54 am

The idea is to "fasttrack" some specific machine without slowing it's traffic for processing. Let's say you have a network of users, you have firewall and queues for them. But then you have a VIP customer (or your own PC) that you will not filter or slow down, and you want the best available speed for it. This is the situation for fasttrack.
FastTract allows a smoother streaming of a video on my home NAS, across the Net, over open VPN connection. I was not able to do this, prior to FastTract, without heavy breakups.

It's not that I normally watch a video over the vpn connection to home. But as a test of performance, it does 'fast tract'.

(My nominal home bandwidth is: 100mbps down, 2.4mbps up).

One thing though. The firewall rules preceding FastTract, are needed to drop invalid input, and new forward which is not dsn-natted for obvious reason.

On this point, do these rules still work when Bittorents are running?

It's a good feature from MikroTik. From where I sit.
on which miktotik model have you tested?
 
User avatar
MTeeker
Frequent Visitor
Frequent Visitor
Posts: 96
Joined: Tue Jun 14, 2011 2:42 pm
Location: Australia

Re: FastTrack - New feature in 6.29

Thu Jun 04, 2015 9:01 am


on which miktotik model have you tested?
RB493G
 
User avatar
honzam
Forum Guru
Forum Guru
Posts: 2394
Joined: Wed Feb 27, 2008 10:27 pm
Location: Czech Republic

Re: FastTrack - New feature in 6.29

Thu Jun 04, 2015 9:26 am

 
User avatar
MTeeker
Frequent Visitor
Frequent Visitor
Posts: 96
Joined: Tue Jun 14, 2011 2:42 pm
Location: Australia

Re: FastTrack - New feature in 6.29

Thu Jun 04, 2015 9:53 am

That's interesting. Hmm.

Video streaming over openvpn connection from my home NAS was definitely much smoother. From G3 connection on mobile phone.

The only change which I am aware of was my redoing of netinstall on RB493G. But this was due to my first misdiagnosis of its faulty power supply.

Two attempts at netinstall pointed to the faulty PSU which failed to reboot my RB493 after the R6.29 upgrade.

Apart from that I cannot explain the smoother streaming.

Cheers.





.
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8709
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: FastTrack - New feature in 6.29

Thu Jun 04, 2015 11:28 am

FastPath and FastTrack are a bit different things, AFAICS

I wonder, is it possible to use FastTrack on the router with ConnectionTracking disabled :) so it just skips processing of Filter, Mangle, etc.
 
User avatar
macgaiver
Forum Guru
Forum Guru
Posts: 1764
Joined: Wed May 18, 2005 5:57 pm
Location: Sol III, Sol system, Sector 001, Alpha Quadrant

Re: FastTrack - New feature in 6.29

Thu Jun 04, 2015 12:15 pm

FastPath and FastTrack are a bit different things, AFAICS

I wonder, is it possible to use FastTrack on the router with ConnectionTracking disabled :) so it just skips processing of Filter, Mangle, etc.
Fasttrack have 3 requirements to work:
1) FastPath support for all involved drivers
2) Connection tracking enabled
3) action=fasttrack-connection rule
 
User avatar
macgaiver
Forum Guru
Forum Guru
Posts: 1764
Joined: Wed May 18, 2005 5:57 pm
Location: Sol III, Sol system, Sector 001, Alpha Quadrant

Re: FastTrack - New feature in 6.29

Thu Jun 04, 2015 12:21 pm

While playing with new 6.30rc10 i notice this:

*) improved connection list: added connection packet/byte counters, added separate counters for fasttrack, added current rate display, added flag wheather connection is fasttracked/srcnated/dstnated, removed 2048 connection entry limit;

It looks like there are now much more comprehensive way to observe fasttrack in action:
conntrack_new_look.png
3 things i would like to indicate:
1) flags for entries (especially i love "dying" one :) )
2) from counters of selected connections i can see tat only 6 packets in original direction and 2 packets in Reply direction went to slowpath, rest was fasttracked.
3) it is now much more easy to operate with connection-bytes and see what connections you need to handle
You do not have the required permissions to view the files attached to this post.
 
User avatar
nz_monkey
Forum Guru
Forum Guru
Posts: 2096
Joined: Mon Jan 14, 2008 1:53 pm
Location: Over the Rainbow
Contact:

Re: FastTrack - New feature in 6.29

Thu Jun 04, 2015 4:25 pm

While playing with new 6.30rc10 i notice this:

*) improved connection list: added connection packet/byte counters, added separate counters for fasttrack, added current rate display, added flag wheather connection is fasttracked/srcnated/dstnated, removed 2048 connection entry limit;

mmm this is a great feature. Nice work Mikrotik.

What do orig/repl mean ? I am assuming send/receive... ?
 
ArunasV
just joined
Posts: 11
Joined: Wed Jan 11, 2012 10:48 am
Location: Vilnius, Lihuania

Re: FastTrack - New feature in 6.29

Mon Jun 08, 2015 1:20 pm

Excellent work guys. I just tested on RB951G and I got significant CPU performance!!!
Thank you!
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8709
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: FastTrack - New feature in 6.29

Mon Jun 08, 2015 2:41 pm

what is faster: router with conntrack disabled, or fasttrack-enabled? :)
 
User avatar
strods
MikroTik Support
MikroTik Support
Topic Author
Posts: 1623
Joined: Wed Jul 16, 2014 7:22 am
Location: Riga, Latvia

Re: FastTrack - New feature in 6.29

Mon Jun 08, 2015 3:09 pm

FastPath (routing with disabled connection tracking) is faster than FastPath with enabled connection tracking handler (which is FastTrack).

You can see description and examples of FastTrack in our latest newsletter (FastPath + Conntrack= FastTrack):
http://download2.mikrotik.com/news/news_65.pdf
 
karadn
just joined
Posts: 7
Joined: Mon Jun 08, 2015 4:44 pm

Re: FastTrack - New feature in 6.29

Mon Jun 08, 2015 4:52 pm

On RB951G-2HnD not work for me. version 6.29.1

/ip settings print
ip-forward: yes
send-redirects: yes
accept-source-route: no
accept-redirects: no
secure-redirects: yes
rp-filter: no
tcp-syncookies: no
max-arp-entries: 8192
arp-timeout: 30s
icmp-rate-limit: 10
icmp-rate-mask: 0x1818
allow-fast-path: yes
ipv4-fast-path-active: no
ipv4-fast-path-packets: 0
ipv4-fast-path-bytes: 0
ipv4-fasttrack-active: yes
ipv4-fasttrack-packets: 0
ipv4-fasttrack-bytes: 0

On fasttrack filter rule number of packets and bytes increase.
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 26322
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: FastTrack - New feature in 6.29

Mon Jun 08, 2015 4:56 pm

make sure you are not using the MAC address to configure your device (Winbox MAC).
Also post your rule please
 
karadn
just joined
Posts: 7
Joined: Mon Jun 08, 2015 4:44 pm

Re: FastTrack - New feature in 6.29

Mon Jun 08, 2015 5:56 pm

I use IP to configure device.

[admin@MikroTik] > /ip firewall filter print
Flags: X - disabled, I - invalid, D - dynamic
0 chain=forward action=fasttrack-connection
connection-state=established,related log=no log-prefix=""

1 chain=forward action=accept connection-state=established,related log=no
log-prefix=""

2 chain=forward action=drop connection-state=invalid log=no log-prefix=""
 
andrewdl
just joined
Posts: 3
Joined: Mon Jun 08, 2015 6:12 pm

Re: FastTrack - New feature in 6.29

Mon Jun 08, 2015 6:17 pm

As I understand, is on vrrp intrefaces fasttrack don't works too?
 
User avatar
macgaiver
Forum Guru
Forum Guru
Posts: 1764
Joined: Wed May 18, 2005 5:57 pm
Location: Sol III, Sol system, Sector 001, Alpha Quadrant

Re: FastTrack - New feature in 6.29

Wed Jun 10, 2015 11:19 am

As I understand, is on vrrp interfaces fasttrack don't works too?
Nop it is not supported at the moment, last i know it was in "top of fast-path to-do list" together with VLAN support.
 
User avatar
macgaiver
Forum Guru
Forum Guru
Posts: 1764
Joined: Wed May 18, 2005 5:57 pm
Location: Sol III, Sol system, Sector 001, Alpha Quadrant

Re: FastTrack - New feature in 6.29

Wed Jun 10, 2015 11:27 am

Update from 6.30RC15... New dynamic dummy rule for fasttrack packets just appeared in Firewall forward, mangle prerouting,forward,postrouting.
234.png
WIth this workaround i think it is almost possible to avoid all confusion about missing fastracked packets, if someone unaware of fasttrack starts to configure router.

This rule will appear as soon as fasttrack-connection rule is enabled, and will remain there until the next reboot, even if you delete/disable fasttrack-connection rule. Support states that it is done by design - as connections that are marked for fasttrack might remain active even after fasttrack-connection rule is disabled.

now only thing missing is similar solution for simple queues - dynamic dummy simple queue for fasttracked traffic.
You do not have the required permissions to view the files attached to this post.
Last edited by macgaiver on Wed Jun 10, 2015 11:48 am, edited 1 time in total.
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8709
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: FastTrack - New feature in 6.29

Wed Jun 10, 2015 11:34 am

now only thing missing is similar solution for simple queues - dynamic dummy simple queue for fasttracked traffic.
and also similar counter in TrafficFlow: how much traffic you have not billed :)
 
User avatar
macgaiver
Forum Guru
Forum Guru
Posts: 1764
Joined: Wed May 18, 2005 5:57 pm
Location: Sol III, Sol system, Sector 001, Alpha Quadrant

Re: FastTrack - New feature in 6.29

Wed Jun 10, 2015 11:51 am

and also similar counter in TrafficFlow: how much traffic you have not billed :)
well... from where i sit fasttrack and trafficflow doesn't have place on the same router, one is mostly for CPE usage, other is mostly for ISP.
I i personally do not think it is MUST HAVE feature
 
User avatar
nz_monkey
Forum Guru
Forum Guru
Posts: 2096
Joined: Mon Jan 14, 2008 1:53 pm
Location: Over the Rainbow
Contact:

Re: FastTrack - New feature in 6.29

Wed Jun 10, 2015 11:39 pm

It would be possible to write a fast path Traffic Flow plug in.

Hopefully we will see one. We use Netflow for billing and diagnostics.
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 26322
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: FastTrack - New feature in 6.29

Thu Jun 11, 2015 11:42 am

Some nice improvements in v6.30rc17 (already in RC section):

*) fasttrack - added dummy firewall rule in filter and mangle tables to show packets/bytes that get processed in fasttrack and bypass firewall;
*) fastpath - vlan interfaces support fastpath;
 
User avatar
nz_monkey
Forum Guru
Forum Guru
Posts: 2096
Joined: Mon Jan 14, 2008 1:53 pm
Location: Over the Rainbow
Contact:

Re: FastTrack - New feature in 6.29

Thu Jun 11, 2015 12:01 pm

Some nice improvements in v6.30rc17 (already in RC section):

*) fasttrack - added dummy firewall rule in filter and mangle tables to show packets/bytes that get processed in fasttrack and bypass firewall;
*) fastpath - vlan interfaces support fastpath;
Thanks for all the work on vlan fastpath MikroTik!
 
upower3
Member
Member
Posts: 425
Joined: Thu May 07, 2015 11:46 am

Re: FastTrack - New feature in 6.29

Thu Jun 11, 2015 12:10 pm

*) fasttrack - added dummy firewall rule in filter and mangle tables to show packets/bytes that get processed in fasttrack and bypass firewall;
I do confirm this dummy rules are useful. But yet very frustrating, as when I see some new lines in the same tables it brings some questions kind of "who did it without me?!" :)


May I please ask you for some questions to better understand this feature?

1. Am I right that FastTrack is some technique that router uses to process packets that belongs to specific connection according to connection tracking mechanism that already exists before?

2. When I use
add chain=forward action=fasttrack-connection connection-state=established,related
I'm in fact somehow "mark" the connection as one that should be processed in that "magic" way?

3. I can do these marking in ip/firewall or in ip/mangle, whatever I like?

4. I should not fasttrack new connections?

5. What if I do fasttrack for all connections (forward, input, output), new, established, related - it won't break the proccessing, right?

6. What if I do the action (fasttrack-connection) in prerouting chain, so all connections be marked before any other processing occurs?

Thank you in advance for answering and explaining!
 
User avatar
macgaiver
Forum Guru
Forum Guru
Posts: 1764
Joined: Wed May 18, 2005 5:57 pm
Location: Sol III, Sol system, Sector 001, Alpha Quadrant

Re: FastTrack - New feature in 6.29

Thu Jun 11, 2015 12:46 pm

1) Yes, first packets of the connections must go the regular way, so that your firewall and nat configuration can be applied to connection, and only then rest of the packets from that connection can be fasttracked

2) Yes. But this rule is for all connections, you can always make it more narrow, for example fasttrack only connections from local network to DMZ and have deep packet inspection, netflow, queues for all public connections

3) yes

4) i think you can, but it will give you no benefit, as first packets will have to go regular way to create conntrack entry anyway.

5) fasttrack works only for forward traffic, and same answer as 4)

6) do not forget that packet that triggers the fasttrack-connection rule will continue the normal way, only next packet will go fastpath way, so you should be fine.
 
onnoossendrijver
Member
Member
Posts: 486
Joined: Mon Jul 14, 2008 11:10 am
Location: The Netherlands

Re: FastTrack - New feature in 6.29

Thu Jun 11, 2015 1:00 pm

I really like the latest beta/rc release! Better speeds than before. Don't know if it is because of the AC improvements or the FastPath/VLAN support..
 
aguntukk
Frequent Visitor
Frequent Visitor
Posts: 50
Joined: Thu Jul 10, 2014 2:37 pm

Re: FastTrack - New feature in 6.29

Fri Jun 12, 2015 2:33 pm

How do i use Fasttrack feature

/ip firewall filter
add chain=forward action=fasttrack-connection connection-state=established,related
add chain=forward action=accept connection-state=established,related
add chain=forward action=drop connection-state=invalid

If i give this simple queues not working....
 
User avatar
macgaiver
Forum Guru
Forum Guru
Posts: 1764
Joined: Wed May 18, 2005 5:57 pm
Location: Sol III, Sol system, Sector 001, Alpha Quadrant

Re: FastTrack - New feature in 6.29

Fri Jun 12, 2015 2:36 pm

What's new in 6.30rc19 (2015-Jun-12 11:45):

*) fastpath - vlan interfaces support fastpath;
*) fastpath - partial support for bonding interfaces (rx only);
*) fastpath - vrrp interfaces support fastpath;

Number of possible setups with Fasttrack just got bigger. And, yes, also works with Q-in-Q, just tested it
 
User avatar
macgaiver
Forum Guru
Forum Guru
Posts: 1764
Joined: Wed May 18, 2005 5:57 pm
Location: Sol III, Sol system, Sector 001, Alpha Quadrant

Re: FastTrack - New feature in 6.29

Fri Jun 12, 2015 2:40 pm

How do i use Fasttrack feature

/ip firewall filter
add chain=forward action=fasttrack-connection connection-state=established,related
add chain=forward action=accept connection-state=established,related
add chain=forward action=drop connection-state=invalid

If i give this simple queues not working....
Yes, that is how fasttrack works - you create a firewall rule that allow connections to skip some processing (including simple queues).
If you use simple queues for all your traffic, sorry, you can't use fasttrack.
But if you use simple queues only for specific traffic, you can always create a more specific fasttrack-connection rule.
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 26322
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: FastTrack - New feature in 6.29

Fri Jun 12, 2015 2:42 pm

aguntukk, queues are for slowing down traffic. fasttrack is for speeding it up. you can't have both at the same time :) at least make a more specific fasttrack rule, if you want only specific traffic to be fast, and other to be queued
 
User avatar
CyberTod
Long time Member
Long time Member
Posts: 510
Joined: Wed Jan 25, 2012 10:23 am

Re: FastTrack - New feature in 6.29

Fri Jun 12, 2015 3:25 pm

You can not use fasttrack with queues.

Fasttrack = skip processing of packets
Queues = processing
 
aguntukk
Frequent Visitor
Frequent Visitor
Posts: 50
Joined: Thu Jul 10, 2014 2:37 pm

Re: FastTrack - New feature in 6.29

Mon Jun 15, 2015 7:27 pm

Thanks for Your help about Fasttrack
 
aguntukk
Frequent Visitor
Frequent Visitor
Posts: 50
Joined: Thu Jul 10, 2014 2:37 pm

Null Route

Mon Jun 15, 2015 7:29 pm

How do i give null route in mikrotik??
Any idea?
 
patrick7
Member
Member
Posts: 341
Joined: Sat Jul 20, 2013 2:40 pm

Re: FastTrack - New feature in 6.29

Mon Jun 15, 2015 8:06 pm

Wrong thread.

/ip route add dst-address=192.0.2.2 type=blackhole
 
chojrak11
Member Candidate
Member Candidate
Posts: 131
Joined: Sun Apr 05, 2009 10:37 am

Re: FastTrack - New feature in 6.29

Tue Jun 16, 2015 3:26 pm

The feature is great, however its user interface is confusing. I think the fast-track rule shouldn't just mark connections, but should automatically work as "Accept", so that the packets don't fall through to the next rule which is in 100% Accept. That's really weird.

I'd expect that only those packets which cannot be fast tracked should fall through to following rules (and ultimately be accepted).

And the dummy rule in 6.30RC only adds to the overall confusion...
2015-06-16_14-21-03.png
You do not have the required permissions to view the files attached to this post.
 
LuizMeier
Member Candidate
Member Candidate
Posts: 104
Joined: Tue Sep 25, 2012 11:57 pm
Location: Curitiba, PR - Brasil

Re: FastTrack - New feature in 6.29

Tue Jun 16, 2015 4:49 pm

The feature is great, however its user interface is confusing. I think the fast-track rule shouldn't just mark connections, but should automatically work as "Accept", so that the packets don't fall through to the next rule which is in 100% Accept. That's really weird.

I'd expect that only those packets which cannot be fast tracked should fall through to following rules (and ultimately be accepted).

And the dummy rule in 6.30RC only adds to the overall confusion...
Same thing here.
2015-06-16_14-21-03.png
 0    ;;; ICMP Permit
      chain=input action=accept protocol=icmp log=no log-prefix="" 

 1    ;;; Accept related input connections
      chain=input action=accept connection-state=established,related log=no log-prefix="" 

 2    ;;; Forward FastTrack
      chain=forward action=fasttrack-connection connection-state=established,related log=no 
      log-prefix="" 

 3    ;;; Accept related forward connections
      chain=forward action=accept connection-state=established,related log=no log-prefix="" 
You do not have the required permissions to view the files attached to this post.
 
jarda
Forum Guru
Forum Guru
Posts: 7756
Joined: Mon Oct 22, 2012 4:46 pm

Tue Jun 16, 2015 7:42 pm

I agree. It is confusing. Fasttrack rules should have exactly the same behaviour, feel and look like all other rules.
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8709
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: FastTrack - New feature in 6.29

Tue Jun 16, 2015 8:54 pm

seems like people are requesting an ability to do 'action=fasstrack passthrough=no'. MT? :)
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 26322
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: FastTrack - New feature in 6.29

Wed Jun 17, 2015 9:55 am

seems like people are requesting an ability to do 'action=fasstrack passthrough=no'. MT? :)
Can't you simply add a drop rule after it?
 
User avatar
CyberTod
Long time Member
Long time Member
Posts: 510
Joined: Wed Jan 25, 2012 10:23 am

Re: FastTrack - New feature in 6.29

Wed Jun 17, 2015 10:20 am

I only drop invalid connections in forward chain. I only have fasttrack rule without accept rule after it, because the packets are accepted anyway and it works.
 
Ansy
Frequent Visitor
Frequent Visitor
Posts: 72
Joined: Mon Oct 17, 2011 1:32 pm
Location: Russia
Contact:

Re: FastTrack - New feature in 6.29

Wed Jun 17, 2015 12:55 pm

It seems like FastPath/FastTrack cannot be switched off in configuration Bridge+Firewall+Queues (no routing) :(
"Use IP Firewall" box is checked ON, "Allow Fast Path" is OFF in Bridge Settings, and either Firewall Filter fasttrack forward rule is DISABLED too.
But -- Bridge Fast Path Packets & Bytes counters are actively increasing, Simple Queues counters are almost empty and not functioning AFAICS, so the Firewall counters and either Torch -- looks like only start packets of every session goes to Firewall.

RB750UP, ROS 6.30rc19 now.
(6.29 and other RC's crashed often and eating CPU by management process -- http://forum.mikrotik.com/viewtopic.php ... 36#p485836 )
[Ticket#2015060366000431] [Ticket#2015053066000266] [Ticket#2015052966000214]

Who else can test firewalling/queuing BRIDGE?
 
User avatar
G2Dolphin
Member Candidate
Member Candidate
Posts: 164
Joined: Sun May 17, 2015 6:03 pm
Location: Moscow, Russia

Re: FastTrack - New feature in 6.29

Sat Jun 20, 2015 2:27 pm

How can I switch off the default dummy fasttrack rule in the filter? What sense in it anyway, we have the same counters in IP-Settings...
 
pchott
newbie
Posts: 44
Joined: Tue Apr 29, 2014 11:15 am
Location: Holzkirchen, Germany

Re: FastTrack - New feature in 6.29

Tue Jun 23, 2015 9:50 am

I see here one example where FastTrack would be very usefull: ! VoIP !!!.

VoIP is usually configured on separate VLAN that has to be prioritized.

Is it possible to use FastTrack for VoIP VLAN? or is that RFE?
 
kobuki
Member Candidate
Member Candidate
Posts: 198
Joined: Sat Apr 02, 2011 5:59 pm

Re: FastTrack - New feature in 6.29

Wed Jun 24, 2015 1:32 am

I was anticipating this feature and installed 6.29.1 only to find out that it's not supported on my router at home which is an RB450G. It has been one of the most popular ones and there isn't a night and day difference between this and the 750G which is indeed supported. Their hardware is almost identical. Why can't this be supported? Is it some hardware limitation or just company policy? I had exactly zero problems with the 450G since I've installed it 4-5 years ago. Sad.
 
kobuki
Member Candidate
Member Candidate
Posts: 198
Joined: Sat Apr 02, 2011 5:59 pm

Re: FastTrack - New feature in 6.29

Wed Jun 24, 2015 9:35 pm

I wonder if I ever get an answer...
 
patrick7
Member
Member
Posts: 341
Joined: Sat Jul 20, 2013 2:40 pm

Re: FastTrack - New feature in 6.29

Wed Jun 24, 2015 11:54 pm

Are you really complaining about not getting an answer in a forum within 8 hours?
 
kobuki
Member Candidate
Member Candidate
Posts: 198
Joined: Sat Apr 02, 2011 5:59 pm

Re: FastTrack - New feature in 6.29

Thu Jun 25, 2015 12:42 am

Are you really complaining about not getting an answer in a forum within 8 hours?
Check your clock, please. It was about a day later.

But no. It was merely a rhetorical question, if that helps to satisfy your curiosity (or your feeling of righteousness).
 
patrick7
Member
Member
Posts: 341
Joined: Sat Jul 20, 2013 2:40 pm

Re: FastTrack - New feature in 6.29

Thu Jun 25, 2015 1:11 am

It was on the same day.
You do not have the required permissions to view the files attached to this post.
 
User avatar
omidkosari
Trainer
Trainer
Posts: 640
Joined: Fri Sep 01, 2006 4:18 pm
Location: Canada, Toronto

Re: FastTrack - New feature in 6.29

Thu Jun 25, 2015 10:24 am

Does FastPath work with EOIP or GRE tunnels ? We have many router which they are just a simple bridge between an ethernet and an EOIP tunnel to pass pppoe to remote router .
In that situation fastpath would be very useful .
 
jarda
Forum Guru
Forum Guru
Posts: 7756
Joined: Mon Oct 22, 2012 4:46 pm

Re: FastTrack - New feature in 6.29

Thu Jun 25, 2015 11:14 am

It was on the same day.
depends on your local settings. I see 20hours difference (not being fooled by am/pm...)
 
LuizMeier
Member Candidate
Member Candidate
Posts: 104
Joined: Tue Sep 25, 2012 11:57 pm
Location: Curitiba, PR - Brasil

Re: FastTrack - New feature in 6.29

Thu Jun 25, 2015 9:04 pm

Just made a test with queue. Mikrotik just ignores the queues at all if FastTrack is active. :)
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8709
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: FastTrack - New feature in 6.29

Thu Jun 25, 2015 9:35 pm

exactly. no slow processing (queues, firewall) at all. by design :)
 
robdeep
just joined
Posts: 8
Joined: Thu Oct 04, 2012 6:33 pm

Re: FastTrack - New feature in 6.29

Fri Jun 26, 2015 3:01 am

I'm experiencing the exact same thing. Same routerboard here.

Any solutions?

It seems like FastTrack somehow disturbs my ssh/cifs server connections through IPSec-tunnel..

Ping still works as expected and I can even connect to suitable ports with telnet, but connecting with Putty (ssh) or Windows Explorer (CIFS) just hangs until timeout.. Anyhow, From IP/Firewall/Connection I can see established TCP-connection between client and server in both cases.. SSH to RB works fine, its just connections to servers behind my RB.

After disabling these 3 firewall rules everything works fine again:
0 X chain=forward action=fasttrack-connection connection-state=established,related log=no log-prefix=""
1 X chain=forward action=accept connection-state=established,related log=no log-prefix=""
2 X chain=forward action=drop connection-state=invalid log=no log-prefix=""

..but if I enable these again, problem comes back immediately (it also kills active ssh connections)..

Is anyone else noticed anything like this?

Not the biggest problem for me, because my RB2011UiAS-2HnD can handle my Internet connection pretty well also without FastTrack, but just a notice..
 
Ansy
Frequent Visitor
Frequent Visitor
Posts: 72
Joined: Mon Oct 17, 2011 1:32 pm
Location: Russia
Contact:

Re: FastTrack - New feature in 6.29

Fri Jun 26, 2015 10:00 am

Just made a test with queue. Mikrotik just ignores the queues at all if FastTrack is active. :)
I don't use "Allow Fast Path" in "Bridge Settings", but I do "Use IP Firewall" there.

Beside of that, "Bridge Fast Path Packets & Bytes" counters are actively (not Mikro!) ticking now, ROS version 6.29.. 6.30rc19.. 6.30rc22.

I don't order and don't like it :( My production Queuing Bridge just totally broken by this issue... all users fill all link bandwidth without any limits now. DNAT and Firewall don't functioning too.

I really don't want to change Queuing Bridge to Queuing Router due to lack of IP subnets, and I don't want to change my RB750UP based AP-sectors too because I like this simple & smart PoE installation.
 
User avatar
CyberTod
Long time Member
Long time Member
Posts: 510
Joined: Wed Jan 25, 2012 10:23 am

Re: FastTrack - New feature in 6.29

Fri Jun 26, 2015 10:41 am

Fasttrack will not be active if you don't add the firewall rule for it. And Fastpath can be disabled from IP->Settings and for bridge in Bridge->Settings too. Check also Queue->Interface queues.
 
Ansy
Frequent Visitor
Frequent Visitor
Posts: 72
Joined: Mon Oct 17, 2011 1:32 pm
Location: Russia
Contact:

Re: FastTrack - New feature in 6.29

Fri Jun 26, 2015 11:37 am

Fasttrack will not be active if you don't add the firewall rule for it. And Fastpath can be disabled from IP->Settings and for bridge in Bridge->Settings too. Check also Queue->Interface queues.
Well, screenshot is below.
2015-06-26 13-22-51 Скриншот экрана.png
Interface Queues are all changed to wireless-default (i.e. sfq) because of WISP infrastructure after RB750UP.
Why did this config work successfully all other ROS versions before 6.29?
You do not have the required permissions to view the files attached to this post.
 
User avatar
omidkosari
Trainer
Trainer
Posts: 640
Joined: Fri Sep 01, 2006 4:18 pm
Location: Canada, Toronto

Re: FastTrack - New feature in 6.29

Sat Jun 27, 2015 10:57 am

FastPath (routing with disabled connection tracking) is faster than FastPath with enabled connection tracking handler (which is FastTrack).

You can see description and examples of FastTrack in our latest newsletter (FastPath + Conntrack= FastTrack):
http://download2.mikrotik.com/news/news_65.pdf
If FastPath is disabled , which one is faster
1- Completely disable connection tracking ?
or
2- Use FastTrack with enabled connection tracking ?

Thanks for clarification
 
User avatar
macgaiver
Forum Guru
Forum Guru
Posts: 1764
Joined: Wed May 18, 2005 5:57 pm
Location: Sol III, Sol system, Sector 001, Alpha Quadrant

Re: FastTrack - New feature in 6.29

Mon Jun 29, 2015 1:27 pm

Well, screenshot is below.
I think you need to write to support with description and supout.rif file from latest RC.
 
User avatar
macgaiver
Forum Guru
Forum Guru
Posts: 1764
Joined: Wed May 18, 2005 5:57 pm
Location: Sol III, Sol system, Sector 001, Alpha Quadrant

Re: FastTrack - New feature in 6.29

Mon Jun 29, 2015 1:29 pm

If FastPath is disabled , which one is faster
1- Completely disable connection tracking ?
or
2- Use FastTrack with enabled connection tracking ?

Thanks for clarification

Simple FastPath will be faster, cause fasttrack enables the same FastPath in case of conntrack. so it is all packets FastPath vs most packets FastPath.
 
User avatar
omidkosari
Trainer
Trainer
Posts: 640
Joined: Fri Sep 01, 2006 4:18 pm
Location: Canada, Toronto

Re: FastTrack - New feature in 6.29

Mon Jun 29, 2015 2:17 pm

If FastPath is disabled , which one is faster
1- Completely disable connection tracking ?
or
2- Use FastTrack with enabled connection tracking ?

Thanks for clarification

Simple FastPath will be faster, cause fasttrack enables the same FastPath in case of conntrack. so it is all packets FastPath vs most packets FastPath.
You mean "Simple FastPath = Completely disable connection tracking" ?
So in my question 1 would be faster , right ?
 
User avatar
macgaiver
Forum Guru
Forum Guru
Posts: 1764
Joined: Wed May 18, 2005 5:57 pm
Location: Sol III, Sol system, Sector 001, Alpha Quadrant

Re: FastTrack - New feature in 6.29

Tue Jun 30, 2015 9:43 am

You mean "Simple FastPath = Completely disable connection tracking" ?
So in my question 1 would be faster , right ?
Yes and Yes.
 
KBV
Frequent Visitor
Frequent Visitor
Posts: 79
Joined: Mon Nov 10, 2014 7:02 pm

Re: FastTrack - New feature in 6.29

Wed Jul 01, 2015 1:11 pm

it's not supported on my router at home which is an RB450G
FastTrack is supported only half router models. So it's normal.
 
User avatar
MadEngineer
Member Candidate
Member Candidate
Posts: 141
Joined: Mon May 02, 2011 10:47 am
Location: New Zealand

Re: FastTrack - New feature in 6.29

Wed Jul 01, 2015 2:36 pm

Curious if anyone with battery/solar powered routers with this function enabled have any power usage data to share
 
rado3105
Member
Member
Posts: 492
Joined: Sat Jan 12, 2008 11:45 pm

Re: FastTrack - New feature in 6.29

Sat Jul 04, 2015 5:33 pm

I have one router that has no rules in firewall filter. But limits one network using SQ, but also the traffic except that network goes through router. I am thinking to make rule that will fasttrack all connections except that one network that uses SQ. Is it good idea? Will it lower CPU usage or not?

something like this:
/ip firewall filter> print
Flags: X - disabled, I - invalid, D - dynamic 
 0    chain=forward action=jump jump-target=fastrack 
      dst-address-list=!fasttrack log=no log-prefix="" 

 1    chain=forward action=jump jump-target=fastrack 
      src-address-list=!fasttrack log=no log-prefix="" 

 2    chain=fastrack action=fasttrack-connection log=no log-prefix="" 
 
jarda
Forum Guru
Forum Guru
Posts: 7756
Joined: Mon Oct 22, 2012 4:46 pm

Re: FastTrack - New feature in 6.29

Sat Jul 11, 2015 1:51 pm

How can I switch off the default dummy fasttrack rule in the filter? What sense in it anyway, we have the same counters in IP-Settings...
Vote against dummy rules in firewall: http://forum.mikrotik.com/viewtopic.php?f=1&t=98471
 
miharoot
just joined
Posts: 22
Joined: Sun May 19, 2013 3:59 pm

Re: FastTrack - New feature in 6.29

Tue Jul 14, 2015 10:55 am

Do I understand correctly, that it does not work with l2tp interface?
 
User avatar
macgaiver
Forum Guru
Forum Guru
Posts: 1764
Joined: Wed May 18, 2005 5:57 pm
Location: Sol III, Sol system, Sector 001, Alpha Quadrant

Re: FastTrack - New feature in 6.29

Tue Jul 14, 2015 11:14 am

Do I understand correctly, that it does not work with l2tp interface?
No, currently it is not supported
 
shifto
just joined
Posts: 16
Joined: Wed Jul 15, 2015 1:58 am

Re: FastTrack - New feature in 6.29

Wed Jul 15, 2015 1:59 am

Do I understand correctly, that it does not work with l2tp interface?
No, currently it is not supported
Also doesn't work with PPPoE clients AFAIK. Is this going to be supported in the future? (And just to be bold, any ETA? :) )
 
undecided
Member Candidate
Member Candidate
Posts: 107
Joined: Mon May 16, 2011 11:07 am

Re: FastTrack - New feature in 6.29

Wed Jul 22, 2015 10:50 am

So I currently use PCC mangle rules, and I use NAT on my WAN interfaces, however I do not use "masquerade" instead I use "src-nat" and specify a range of public IP's to use.

Will fasttrack work on this setup? I have no way to test and I'm reluctant to upgrade and test it on my live environment.

Hoping someone can let me know if it should work with this setup?

tx
 
User avatar
MadEngineer
Member Candidate
Member Candidate
Posts: 141
Joined: Mon May 02, 2011 10:47 am
Location: New Zealand

Re: FastTrack - New feature in 6.29

Sun Aug 16, 2015 9:47 am

Why do I have the "special dummy rule" duplicated three times in Mangle?
 
105547111
Member Candidate
Member Candidate
Posts: 135
Joined: Fri Jun 22, 2012 9:46 pm

Re: FastTrack - New feature in 6.29

Mon Aug 17, 2015 11:15 pm

Why do I have the "special dummy rule" duplicated three times in Mangle?
Look closely there's 3 distinct rules...

forward, prerouting and postrouting.

Just gives you a breakdown of total.
 
User avatar
MTeeker
Frequent Visitor
Frequent Visitor
Posts: 96
Joined: Tue Jun 14, 2011 2:42 pm
Location: Australia

Re: FastTrack - New feature in 6.29

Mon Sep 07, 2015 2:18 am

From what I can see, the main constraint of Fasttrack is Qos of VoIP queue priorities. Simply because Fasttrack does not enlarge an existing bandwidth pipe, it only removes processing at internal 'checkpoint' to speed up delivery.

From this angle though, the intended working of QoS of VoIP (using mangle marking pre-routing, plus queue tree settings) remains a valid reason. It's bandwidth priority required to ensure QoS of such as VoIP calls.

Using macgaiver's apt metaphor of a club entrance, logistically speaking, there are clearly three queues at the club entrance.

- A special priority entrance for VIP (always available for very important personnel).
- A quick pass-through for regular faces, and
- A queue for unknown faces.

I think the real challenges is to make Fasttrack work only in the 'remaining nominal bandwidth' after allowing for QoS (i.e. VIP entrance) whenever it's needed. This way, a VoIP call does not turns into a conversation of broken words with silence breaks in between. This would definitely result in a better overall performance of suitable MikroTik routerboads. A win-win, using a cliche. I believe Jarda has a very good point here in respect of having more than one queue for Fasttracking.

It broke my initiated VoIP call on the receiver's end when Fatstrack was turned on even though with a connection of 100mbps/down and 2.4mbps/up.

I does sounds like a contradictory issue as it currently stands. But I thought of giving a fresh perspective.
Cheers
 
jarda
Forum Guru
Forum Guru
Posts: 7756
Joined: Mon Oct 22, 2012 4:46 pm

Mon Sep 07, 2015 8:20 am

Just imagine that someone has weak router, fast Internet access and doesn't care about the qos. His router is a bottleneck without fasttrack. When fasttrack is on: whooooo, what a ride!
 
efaden
Forum Guru
Forum Guru
Posts: 1708
Joined: Sat Mar 30, 2013 1:55 am
Location: New York, USA

Re: FastTrack - New feature in 6.29

Wed Sep 09, 2015 2:53 am

Anyone have any tips for why I would have a fasttrack connection rule in forward, but yet "fasttrack active" is no? I see traffic going to the fasttrack rule. Thoughts?
 
jarda
Forum Guru
Forum Guru
Posts: 7756
Joined: Mon Oct 22, 2012 4:46 pm

Wed Sep 09, 2015 8:30 am

If subsequent accepting rule counts the same like previous fasttracking rule, the fasttrack is not applied. Probably some of the conditions are not met in your case. Check the wiki.
 
hatred
just joined
Posts: 21
Joined: Tue Sep 01, 2015 10:23 pm
Location: Belarus, Minsk

Re: FastTrack - New feature in 6.29

Wed Sep 09, 2015 2:09 pm

Why do I have the "special dummy rule" duplicated three times in Mangle?
Look closely there's 3 distinct rules...

forward, prerouting and postrouting.

Just gives you a breakdown of total.
But why all chains' counters are always equal?
MT-dummy.png
You do not have the required permissions to view the files attached to this post.
 
User avatar
MTeeker
Frequent Visitor
Frequent Visitor
Posts: 96
Joined: Tue Jun 14, 2011 2:42 pm
Location: Australia

Re: FastTrack - New feature in 6.29

Thu Sep 10, 2015 2:38 am

Perhaps it's a trivial thing. But it does not make sense.

When Fasttrack is engaged under 6.30.4, Speedtest.net (by Ookla) does not indicate a better performance that I would expect. In fact, it gives much lower performance than my nominal bandwidth 100mbps/down and 2.4mbps up.

Does anybody have the same experiences?
 
jarda
Forum Guru
Forum Guru
Posts: 7756
Joined: Mon Oct 22, 2012 4:46 pm

Thu Sep 10, 2015 9:24 am

My experience is that correctly used fasttrack helps always in common situations.
 
User avatar
MTeeker
Frequent Visitor
Frequent Visitor
Posts: 96
Joined: Tue Jun 14, 2011 2:42 pm
Location: Australia

Re: FastTrack - New feature in 6.29

Thu Sep 10, 2015 9:51 am

Would you be able to run a Sppedtest (Ookla) on your wired device and comment on it?

Many thanks.
 
jarda
Forum Guru
Forum Guru
Posts: 7756
Joined: Mon Oct 22, 2012 4:46 pm

Re: FastTrack - New feature in 6.29

Thu Sep 10, 2015 10:12 pm

Actually my devices are configured in the way that there is no need for fasttrack. The devices are able to handle the traffic without it and the cpu is not maxed out. When fasttrack is on, the main effect is lowered cpu usage, nothing more. So there is nothing I can show you on the speedtest.net results. I had recently temporary 3times more bandwidth limit set on some of my places. When I was testing the fasttrack there, I have found that I am maxing out RB2011 around 100Mbits/s but with fasttrack it is able to run the 120Mbits/s with around 20% cpu utilization. Then I used the fasttrack only for torrents to get downloads faster and do not block the router by cpu utilization. As it prevents queues to work, I am not using fasttrack in any other way than for torrents and local subnets communication.
 
User avatar
MTeeker
Frequent Visitor
Frequent Visitor
Posts: 96
Joined: Tue Jun 14, 2011 2:42 pm
Location: Australia

Re: FastTrack - New feature in 6.29

Sat Sep 12, 2015 6:43 am

Thanks for the reply.

I have just now been able to isolate a local issue with my ISP which has nothing to do with Fasttrack effects, measured via Speedtest indicator.

Red face. Sorry for barking at the wrong tree.
Cheers
 
jarda
Forum Guru
Forum Guru
Posts: 7756
Joined: Mon Oct 22, 2012 4:46 pm

Mon Sep 14, 2015 4:19 pm

Never mind. It is not so easy to find the reason of the problem many times.
 
User avatar
docmarius
Forum Guru
Forum Guru
Posts: 1222
Joined: Sat Nov 06, 2010 12:04 pm
Location: Timisoara, Romania
Contact:

Re: FastTrack - New feature in 6.29

Mon Sep 14, 2015 6:57 pm

Just an observation: If you use fasttrack on a router capable of wirespeed on a PPPoE link, like the RB110AHx2 on a 1Gbps PPPoE, placing a fasttrack rule in the filter table will actually slow it down a tiny amount (in my case 900Mbps vs. 925 Mbps), because of that additional rule adding a small amount of processing while the PPPoE traffic needs to bypass that rule, not being fasttrack-able.
In this case, not using fasttrack is actually faster for WLAN traffic.
 
User avatar
MTeeker
Frequent Visitor
Frequent Visitor
Posts: 96
Joined: Tue Jun 14, 2011 2:42 pm
Location: Australia

Re: FastTrack - New feature in 6.29

Fri Sep 18, 2015 1:30 am

@ jarda,

I decided not to use Fast Track for the time being. Much along your reasoning but with less knowledge than you have.

I am thinking about a potential flaw at the conceptual level. Imagine a convoy of delivery trucks arriving at my University gate, using a metaphor. The gatekeeper checks the first few trucks and then allows the rest of the convoy to go through. To speed up traffic of course.

The implied assumption is the rest of the convoy carries the same thing as the first few trucks.

What risk does Fast Track pose if it's not the case? Is it possible for subsequent packets to carry additional something else that the router firewall is not aware of, and therefore stops its delivery.

Like to hear your thought.
Cheer
(edited for clarity)
 
andriys
Forum Guru
Forum Guru
Posts: 1526
Joined: Thu Nov 24, 2011 1:59 pm
Location: Kharkiv, Ukraine

Re: FastTrack - New feature in 6.29

Sat Sep 19, 2015 9:25 am

I am thinking about a potential flaw at the conceptual level. Imagine a convoy of delivery trucks arriving at my University gate, using a metaphor. The gatekeeper checks the first few trucks and then allows the rest of the convoy to go through. To speed up traffic of course.

The implied assumption is the rest of the convoy carries the same thing as the first few trucks.
That's not a flaw in concept of fasttrack. A typically configured firewall without fasttrack behaves just like that anyways- checks the initial handshake, applies policies, accepts everything else. You need to understand that a firewall is NOT a traffic scanner, i.e. it does not (and should not) behave like antiviruses do. Once connection is established there's very little firewall can check in the following packets.
 
User avatar
MTeeker
Frequent Visitor
Frequent Visitor
Posts: 96
Joined: Tue Jun 14, 2011 2:42 pm
Location: Australia

Re: FastTrack - New feature in 6.29

Sun Sep 20, 2015 11:26 am

Thanks for that explanation. I got mixed up.
 
andriys
Forum Guru
Forum Guru
Posts: 1526
Joined: Thu Nov 24, 2011 1:59 pm
Location: Kharkiv, Ukraine

Re: FastTrack - New feature in 6.29

Thu Sep 24, 2015 1:41 pm

It would be nice to have updated Packet Flow diagram with FastTrack blocks added somewhere. It would have made so many things just way easier to understand and diagnose. It took me considerable amount of time, for instance, to understand that outbound inner-tunnel IPsec traffic should be fully exempt from FastTrack processing, otherwise it'll leave the wire unencrypted. Highly counter-intuitive.
 
jarda
Forum Guru
Forum Guru
Posts: 7756
Joined: Mon Oct 22, 2012 4:46 pm

Thu Sep 24, 2015 11:28 pm

Correct. I have a feeling (from email communication with mikrotik staff) that they work on some new way of fasttrack implementation. But as always they don't say anything....
 
User avatar
sergejs
MikroTik Support
MikroTik Support
Posts: 6695
Joined: Thu Mar 31, 2005 3:33 pm
Location: Riga, Latvia
Contact:

Re: FastTrack - New feature in 6.29

Fri Nov 27, 2015 9:52 am

We have made separated documentation for FastTrack on the wiki,
http://wiki.mikrotik.com/wiki/Manual:Wiki/Fasttrack
Currently it has initial description and configuration examples. More information is coming.
 
User avatar
Bytezone
newbie
Posts: 41
Joined: Tue Jul 14, 2015 6:01 am

Re: FastTrack - New feature in 6.29

Wed Dec 09, 2015 7:58 pm

Can anybody confirm whether it's supported on x86 .. if not what should i do to use it?
I have v6.33 installed on my computer.
 
User avatar
nz_monkey
Forum Guru
Forum Guru
Posts: 2096
Joined: Mon Jan 14, 2008 1:53 pm
Location: Over the Rainbow
Contact:

Re: FastTrack - New feature in 6.29

Wed Dec 09, 2015 9:21 pm

No fastpath or fasttrack on x86 for now...
 
User avatar
Bytezone
newbie
Posts: 41
Joined: Tue Jul 14, 2015 6:01 am

Re: FastTrack - New feature in 6.29

Thu Dec 10, 2015 4:04 am

Even though it's existing as a feature on x86 ROS v6.33, really disappointed i see the fasttrack-connection on the action menu and can not use it !! .. thanks nz_monkey I hope mikrotik people do their job for this matter so i can enjoy this great feature like my friends here. :)
 
realdreams
newbie
Posts: 30
Joined: Sat Mar 09, 2013 8:54 am

Re: FastTrack - New feature in 6.29

Sun Dec 20, 2015 6:27 am

No fastpath or fasttrack on x86 for now...
or ever? Isn't fastpath/fasttrack using hardware specific capabilities? And for x86, why do you even need it?
 
realdreams
newbie
Posts: 30
Joined: Sat Mar 09, 2013 8:54 am

Re: FastTrack - New feature in 6.29

Sun Dec 20, 2015 6:32 am

ip/firewall/filter
chain=forward action=fasttrack-connection connection-state=established,related log=no log-prefix=""
chain=forward action=accept connection-state=established,related log=no log-prefix=""

Only a test in RB750g, no result...
Same on RB750G 6.33.3, fasttrack filter rule counter is ticking but
IPv4 Fasttrack Active		Yes
IPv4 Fasttrack Packets		0
IPv4 Fasttrack Bytes		0 B
 
User avatar
nz_monkey
Forum Guru
Forum Guru
Posts: 2096
Joined: Mon Jan 14, 2008 1:53 pm
Location: Over the Rainbow
Contact:

Re: FastTrack - New feature in 6.29

Sun Dec 20, 2015 11:23 am

or ever? Isn't fastpath/fasttrack using hardware specific capabilities? And for x86, why do you even need it?
I can't speak for Mikrotik, but it seems like the natural direction for CHR.

Read this:
https://en.m.wikipedia.org/wiki/Data_Pl ... opment_Kit

It is used by Brocade, Juniper and Alcatel-Lucent to do wire speed on x86.
 
kor3k
just joined
Posts: 9
Joined: Mon Dec 21, 2015 7:11 pm

Re: FastTrack - New feature in 6.29

Mon Dec 21, 2015 7:33 pm

fasttrack is indeed a cool feature, but it's current implementation is confusing and misleading. it also breaks the "normal" rule behavior.

when you place a "fasttrack connection" rule in your fw, then packets matched with this rule may or may not be fasttracked. that means, not all matching packets are consumed by this rule, therefore you need an "accept" rule right after the fasttrack rule.

this is not how rules behave. also, you cannot just replace your "accept" rules with "fasttrack", you have to add them.

so to correct this, the "fasttrack connection" action SHOULD utilize fallback to accept:
  • if fasttrack can be applied on a packet, then it is fasttracked.
  • if fasttrack can not be applied on a packet, then it is accepted.
then and only then all matched packets are consumed, so no need for additional accept rule and no more "broken behavior".
 
jarda
Forum Guru
Forum Guru
Posts: 7756
Joined: Mon Oct 22, 2012 4:46 pm

Tue Dec 22, 2015 11:53 am

Interesting concept. As the fasttrack is kind of mangle rule on connection level it should be rather applicable to all types of traffic matching the rule criteria. And anyway there should be also "not match" or "pass" counter on each rule to know what part of load was captured or not matched by each rule. It's obvious that fasttrack is not well cooked enough yet. Mikrotik admitted this to me long time ago. I hope we will see more rationally working fasttrack soon.
 
User avatar
macgaiver
Forum Guru
Forum Guru
Posts: 1764
Joined: Wed May 18, 2005 5:57 pm
Location: Sol III, Sol system, Sector 001, Alpha Quadrant

Re: FastTrack - New feature in 6.29

Wed Jan 06, 2016 1:47 pm

fasttrack is indeed a cool feature, but it's current implementation is confusing and misleading. it also breaks the "normal" rule behavior.

when you place a "fasttrack connection" rule in your fw, then packets matched with this rule may or may not be fasttracked. that means, not all matching packets are consumed by this rule, therefore you need an "accept" rule right after the fasttrack rule.

this is not how rules behave. also, you cannot just replace your "accept" rules with "fasttrack", you have to add them.

so to correct this, the "fasttrack connection" action SHOULD utilize fallback to accept:
  • if fasttrack can be applied on a packet, then it is fasttracked.
  • if fasttrack can not be applied on a packet, then it is accepted.
then and only then all matched packets are consumed, so no need for additional accept rule and no more "broken behavior".
1) mark-connection work exactly the same way.

2) if packet was received fragmented (it is received in slow path) and it will never go fastpath, but it can still trigger that rule, also not all packets form connection will be fastpath as you need some of those to refresh conntrack and arp timeouts, so you need accept rules anyway.

3) how will you combine fasttrack if firewall that checks connection-state=new, like you can do now?
 
blahblah927
just joined
Posts: 13
Joined: Wed Apr 20, 2011 12:13 pm

Re: FastTrack - New feature in 6.29

Thu Mar 17, 2016 2:27 pm

Is there any way to use the fastpath feature with hotspot? my box load is kinda high due to the NAT and queueing
 
User avatar
strods
MikroTik Support
MikroTik Support
Topic Author
Posts: 1623
Joined: Wed Jul 16, 2014 7:22 am
Location: Riga, Latvia

Re: FastTrack - New feature in 6.29

Thu Mar 17, 2016 3:00 pm

There is a presentation available where FastPath and FastTrack is explained in detail. It is available here:
http://mum.mikrotik.com/presentations/E ... 413105.pdf
https://www.youtube.com/watch?v=8bl7V5i ... 0HD40QyLEe
 
kabal
just joined
Posts: 8
Joined: Sat Dec 25, 2010 6:03 pm
Location: Ukraine

Re: FastTrack - New feature in 6.29

Sat Mar 26, 2016 10:17 pm

On RB750G and RB750UP not worked =( ROS 6.34.3
 
User avatar
NetVicious
Member Candidate
Member Candidate
Posts: 128
Joined: Fri Nov 13, 2009 3:30 pm
Location: Spain

Re: FastTrack - New feature in 6.29

Tue May 30, 2017 2:36 pm

Hi!

I read RB4xx don't supports FastTrack. But why Winbox it showing this option on the Firewall action ?

IMHO, Winbox should detect this and the fastrack option should not appear.

Regards,
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8709
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: FastTrack - New feature in 6.29

Wed May 31, 2017 5:25 pm

I read RB4xx don't supports FastTrack. But why Winbox it showing this option on the Firewall action ?
IMHO, Winbox should detect this and the fastrack option should not appear.
looks like you're talking about FastPath, not FastTrack. FastTrack is supported by RouterOS, not by hardware
 
Zdenekhb
just joined
Posts: 10
Joined: Tue Apr 24, 2012 9:18 am

Re: FastTrack - New feature in 6.29

Sun Aug 13, 2017 10:30 am

New ISSUE: Fasttrack causes errors with IPTV HLS. If is used Fasttrack , IPTV does not Work.... in all versions.of RoS vhere is it
 
User avatar
macgaiver
Forum Guru
Forum Guru
Posts: 1764
Joined: Wed May 18, 2005 5:57 pm
Location: Sol III, Sol system, Sector 001, Alpha Quadrant

Re: FastTrack - New feature in 6.29

Tue Aug 15, 2017 1:22 pm

New ISSUE: Fasttrack causes errors with IPTV HLS. If is used Fasttrack , IPTV does not Work.... in all versions.of RoS vhere is it
What do you mean by "IPTV HLS"? can you be more precise? i have no issues with my IPTV and Fastpath? If you use Fasttrack then this traffic is NATed??
There are not enough information in this statement :)
 
User avatar
strods
MikroTik Support
MikroTik Support
Topic Author
Posts: 1623
Joined: Wed Jul 16, 2014 7:22 am
Location: Riga, Latvia

Re: FastTrack - New feature in 6.29

Tue Aug 15, 2017 1:26 pm

Are you using any of RouterOS functions which are listed here?
https://wiki.mikrotik.com/wiki/Manual:IP/Fasttrack

"Note that not all packets in a connection can be fasttracked, so it is likely to see some packets going through slow path even though connection is marked for fasttrack. This is the reason why fasttrack-connection is usually followed by identical action=accept rule. Fasttracked packets bypass firewall, connection tracking, simple queues, queue tree with parent=global, ip traffic-flow (restriction removed in 6.33), IP accounting, IPSec, hotspot universal client, VRF assignment, so it is up to administrator to make sure fasttrack does not interfere with other configuration."

If you do, then you need to adjust FastTrack rule so it would exclude this specific traffic.
 
GARCIADOEGOGERMAN
newbie
Posts: 25
Joined: Fri Aug 18, 2017 2:05 pm

Re: FastTrack - New feature in 6.29

Fri Aug 18, 2017 2:11 pm

Good Morning!!!
A few days ago I bought an RB750GR3 for my home.
In my house I have internet connection of 30 megs of downhill and 3 megs of climb.
My query is if it is worth using fasttrack for this speed ???
Fasttrack is only for WAN-LAN or does it also affect LAN-LAN ???
On the other hand, the configuration that comes by default has everything activated or you have to do some particular configuration but ???

Thank you very much already.

Greetings.
 
User avatar
amt
Long time Member
Long time Member
Posts: 529
Joined: Fri Jan 16, 2015 2:05 pm

Re: FastTrack - New feature in 6.29

Fri Aug 18, 2017 4:55 pm

New ISSUE: Fasttrack causes errors with IPTV HLS. If is used Fasttrack , IPTV does not Work.... in all versions.of RoS vhere is it
thats what i try to solve, today i was searching ipTV problems in forum cause i also have a problem at iPTV....
what kind of problem do you have with ipTV ? can you share plase ?
 
User avatar
aditrodostress
just joined
Posts: 13
Joined: Fri May 20, 2016 7:46 am
Location: Jakarta

Re: FastTrack - New feature in 6.29

Mon Aug 21, 2017 12:19 am

fasttrack on rb850gx2 ?
 
User avatar
Cha0s
Forum Guru
Forum Guru
Posts: 1140
Joined: Tue Oct 11, 2005 4:53 pm

Re: FastTrack - New feature in 6.29

Mon Aug 21, 2017 3:38 pm

 
Modestas
newbie
Posts: 25
Joined: Mon Jul 16, 2012 10:59 am
Location: Vilnius, Lithuania

Re: FastTrack - New feature in 6.29

Fri Aug 25, 2017 4:03 pm

However, both OS CLI and WinBox happily allow to enable Fasttrack on RB850Gx2. Filter rule with action=fasttrack-connection is also OK on RB850Gx2.
I really wonder what technical limitations on RB1xx, RB5xx, RB850 prevent FastPath.
 
GARCIADOEGOGERMAN
newbie
Posts: 25
Joined: Fri Aug 18, 2017 2:05 pm

Re: FastTrack - New feature in 6.29

Sat Aug 26, 2017 12:41 am

Good Morning!!!
A few days ago I bought an RB750GR3 for my home.
In my house I have internet connection of 30 megs of downhill and 3 megs of climb.
My query is if it is worth using fasttrack for this speed ???
Fasttrack is only for WAN-LAN or does it also affect LAN-LAN ???
On the other hand, the configuration that comes by default has everything activated or you have to do some particular configuration but ???

Thank you very much already.

Greetings.
 
idlemind
Forum Guru
Forum Guru
Posts: 1146
Joined: Fri Mar 24, 2017 11:15 pm
Location: USA

Re: FastTrack - New feature in 6.29

Sat Aug 26, 2017 7:07 pm

Good Morning!!!
A few days ago I bought an RB750GR3 for my home.
In my house I have internet connection of 30 megs of downhill and 3 megs of climb.
My query is if it is worth using fasttrack for this speed ???
Fasttrack is only for WAN-LAN or does it also affect LAN-LAN ???
On the other hand, the configuration that comes by default has everything activated or you have to do some particular configuration but ???

Thank you very much already.

Greetings.
FastTrack will help keep CPU utilization low. It's configured by default so you might as well leave it on. Local connections will only be FastTracked if you are doing inter-VLAN routing on the LAN side. If you have a single flat network on the LAN your traffic will be "switched" at line rate with or without FastTrack.

I use a RB750Gr3 on my LAN and have tested with and without FastTrack and it definitely won't limit you if you turn it off on a 30Mb/3Mb connection as far as accessing the Internet is concerned with a single flat network behind the Internet.
 
GARCIADOEGOGERMAN
newbie
Posts: 25
Joined: Fri Aug 18, 2017 2:05 pm

Re: FastTrack - New feature in 6.29

Sat Aug 26, 2017 11:16 pm

Good Morning!!!
A few days ago I bought an RB750GR3 for my home.
In my house I have internet connection of 30 megs of downhill and 3 megs of climb.
My query is if it is worth using fasttrack for this speed ???
Fasttrack is only for WAN-LAN or does it also affect LAN-LAN ???
On the other hand, the configuration that comes by default has everything activated or you have to do some particular configuration but ???

Thank you very much already.

Greetings.
FastTrack will help keep CPU utilization low. It's configured by default so you might as well leave it on. Local connections will only be FastTracked if you are doing inter-VLAN routing on the LAN side. If you have a single flat network on the LAN your traffic will be "switched" at line rate with or without FastTrack.

I use a RB750Gr3 on my LAN and have tested with and without FastTrack and it definitely won't limit you if you turn it off on a 30Mb/3Mb connection as far as accessing the Internet is concerned with a single flat network behind the Internet.
Thanks for your answer!!! Greetings.

Who is online

Users browsing this forum: No registered users and 19 guests