EoIP Tunnel poor performance

Hi,
I have two mikrotik routers connected via two diferent ISP in differents locations. One RT750Gr3(6.42.9) and other RT750Gr3(6.42.9).
In one locatacion we have 600mb fiber connection and in the other location we have 100mb fiber coneccion, diferente ISP providers.
In the second location all the traffic goes through the first location, and can only reach 20mb as maximum bandwidth (10-15mb or less normaly), I know that the encryption of the tunnel can reduce the bandwidth but from 100mb to 20mb it seems exaggerated.
So I hope that someone can help me improve or be able to achieve an improvement in the connection of the second location
I do not know very well what I’m doing because I’m not a network administrator, so I could read through the forum is that it can be MTU problem but I do not know for sure

Eoip interface had MTU 1406 but yesterday I changed to 1542 because I read that it could be improve the performance.
Clam TCP MSS and Allow Fast Path is activated and L2 MTU is 65535 (I do not know if this value is correct for the proper functioning of the tunnel)

Regards.

if your interface mtu’s are at 1500 you should get 1458, I did such a test with eoIP tunnel and I get better performance with auto mtu, I tried to increase MTU to 1500 but results was not good.

how is your connection with your ISP ? pppoe or etc ?

you are talking about your download speeds, what about for upload ? if you want to sent your connection from location A to location B you should check also upload speed at location A.

My ISP’s are pppoe, and yes, I am talking about download speed, the upload speed is almost the shame, There is not much variation between the download and upload speeds. In general I have poor performance in donwload and upload in location B,
How I can set auto MTU for interfaces or EoIP tunnel?

What would be the correct MTU to establish in the eoip tunnel?

Or how can I get better bandwidth? Right now I’m losing more than 80% of bandwidth and I do not know where the problem is.

Thank you!

while location B using internet, internet comes from location A, So if your Upload is bad at location A you can not get better performance and also eoip add 42 byte header and if your pppoe connection at 1480Mtu you should set your EoIP mtu 1480-42=1438. when create EoIP do not touch anything it will create Mtu Automatically, do not change something on EoIP. and check if both side Actual MTU if same.
whats your Upload speed result at location A ?

My upload in location A is 600mb (symmetric fiber).
I also have a PPTP server binding (1450 MTU) in location A and PPTP client (1450 MTU) in location B
I do not know exactly how the PPTP works and if it is totally necessary for the EoIP tunnel to work.
I read that it probably that ISP or Mikrotiks firewalls are blocking 1723 port and Gre protocol (47), maybe here could be the solution, I have enabled rules in the firewall but I do not see changes.
And the MTU bridge in location A is 1500 and the MTU bridge un location B is 1438.
The PPPoE clients in both mikrotiks have 1480 MTU.

Thanks again for your time!

So you are running an EoIP tunnel inside a PPTP VPN? This would require smaller MTUs to accommodate the tunnel-in-a-tunnel.

In addition, PPTP is an insecure VPN protocol, and uses software encryption which will be loading the CPU in your routers - what is the CPU load whilst you are testing the throughput?

I’d suggest switching to EoIP with IPsec, this encryption can use the hardware acceleration available in your routers.

When I’m testing the throughput the max cpu load that I’ve seen is 5%, no more.
So probably, when I have time, I will try to configure a EoIP tunnel over IPsec