CRS310-8G+2S+ is choking my internet bandwidth

Need some help figuring out why my CRS310 is a choke point in my new fiber connection. This is a new CRS310. I set it up from scratch. Very basic setup with Bridging of the 8 eth ports, Nat, DHCP, and NTP protocols setup. I do have a few filters for obvious reasons. I have one of the SPF+ ports connected with a 6COM 6C-SFP-10G-T for the ethernet connection from my fiber modem. The SPF+ port with the 6Com reports a status rate of 10 Gbps.

I do have Wireguard setup but I turned it all off/disabled to conduct the test.

Using the Ookla speedtest app: I get this as a speed test result: 187.5 Mbps down and 312.2 Mbps up through the CRS310.

When I bypass the CRS310 and connect my PC directly to the fiber connection I get this: 1465.5 Mbps down and 2152.1 Mbps up. MASSIVE DIFFERENCE!

Does anyone have any recommendations as to what I should check? I have gone over this router with a fine tooth comb and cannot for the life of me figure out why the performance is so bad. Sure there is some over head because if a couple of filters, but I turned off all the filters and the results are only marginally better.

Any pointers would be greatly appreciated, thank you.

Have you enabled routing in hardware? If not, you results are not surprising for a dual-core, 800 Mhz, 32-bit ARM CPU.

It looks like the CRS310 won’t do nat or fasttrack connections in hardware, so mostly good
for inter vlan routing maybe using some access lists, much less good as an internet gateway, with Nat, Stateful Firewalling, etc.

https://help.mikrotik.com/docs/display/ROS/L3+Hardware+Offloading#L3HardwareOffloading-L3HWDeviceSupport

Yep, makes sense. The crs series is primarily a switch not a router(yes they route, but not fast and its not what they are aimed at as a product). Use a ccr series or maybe a rb5009.

Thank you rplant and sindy. Should have been obvious to me when I purchased this switch product that it would not be suited to the heavy lifting of a full on fiber connection. Time to deploy the RB5009UG+S+IN, I should get decent performance from it for this purpose. Letting the RB5009 do the heavy lifting and turn the CRS310 back into what it is; a switch. Together they will fulfill the home lab environment very well.

Just a side note to sindy, yes all the ports have L3 Hw Offloading set to yes.

Again many thinks for pointing out the obvious which such grace - Johan.

I´m doing ~9.2Gbps intervlan and ~7.5Gbps at ~3% CPU to the WAN but the ISP router is doing the NAT not the CRS. Does your fiber provide a public IP that you need to NAT on the CRS, is the switch cpu spiking? If hw offload is enabled on all ports configuring fastrack/nat rules will have no effect since those are only sent to the CPU when hw offload is disabled for the interface. More info would be good.