Sindy I tested your idea but sadly it seems that it's not right. After enabling 2 policy routes, I still saw lots of connections with a "F" tag.
I tried to clear all connections, reboot the router and tested a few times, still the same result.

Sindy, sebastia, thank you guys I've tested that both disabling "rule in chain forward with action=fasttrack-connection" and "Allow Fast Path" are working.
So the only question left is if fasttrack is the root cause, why defining 2 policy routes also work...

Thanks sindy. So: 1. "disable the fasttrack rule", do you mean I should go to "ip -> Settings" then uncheck the "Allow Fast Path"? Or just disable those 3 fasttrack mangle rules? 2. Yes, both WAN1 and WAN2 are PPPOE connections so I think it should be fine to set the interface in the routing rule ri...

@sindy @CZFan, I have the same thoughts before but it seems that it's not right. It seems that ROS is picking the routing rules randomly. In order to make this simple, I reset(reset configuration) my RB951 just now and created 2 WAN PPPOE interface(link), then: [admin@MikroTik] > /ip firewall nat pr...

I have 2 WANs connect to my RB951ui, let's say WAN1 and WAN2. My requirement is pretty simple, for some hosts, I want all the traffic from these hosts go to WAN1 and other hosts go to WAN2, so I did: /ip firewall mangle add chain=prerouting action=mark-routing new-routing-mark=go-wan1 passthrough=no...

yeah I have FastPath enabled, but disable it doesn't help.

Thanks, but actually I don't have any FastTrack rules in filter & mangle.

We have a program which serves DNS requests from client, then adding the resolved IP address into ROS's firewall address list. The purpose of doing this is, after client gets DNS response and tries to reach the resolved IP, ROS will tag the packet in prerouting(we have a mangle rule which tags the p...

+1+1+1
udp+lzo ovpn server really matters for me. I don't think this is a technical problem which prevents this feature since this has been requested from several years ago, the real thing should be some non-technical issues.

+1

I really need UDP OpenVPN + compression. TCP OpenVPN doesn't perform well on latency.