Is using FastTrack at MT router with NAT overrides(disables) Simple Queue for traffic passing that router. In other words - can I use FastTrack AND Simple Queues?
Yes, but only if you have an “accept” rule in the firewall to accept the traffic that needs to flow through the simple queue (with established,related setting), and place it directly before the fasttrack rule that would otherwise fasttrack the traffic. That way you can continue to fasttrack all traffic except the traffic that you need to run through a simple queue.
If you want to run all traffic through simple queues this will not be worth doing because then there won’t be anything left to fasttrack after you have made all of the accept rules.
Thank You mducharme for explanation! I didn’t know why sometimes SQ works with FastTrack enabled, and sometimes not. Now I know exactly why:) Thank You:)
This is what I did (rule #6 is the one created as suggested here):
6 ;;; forward rule for subnet/ip destined to queues - established/related only
chain=forward action=accept connection-state=established,related src-address-list=alist_to_s-queue log=no log-prefix=“”
The explanation makes sense, because rule #6 should match subnet 192.168.100.0/24 and then firewall should stop any further rule below it, but traffic originated from 192.168.100.0/24 never hit the simple queue and in fact my feeling is that FastTrack rule is always executed first no matter where is placed in the sequence.
The queue is ok because if I disable the FastTrack rule the simple queue rule kicks in as expected.
This did the trick and now it works perfectly…and it makes also perfect sense considering that indeed the queue has two direction.
Many thanks for your quick support.
I did as informed and the simple queues returned to handle the traffic, however the CPU load remains the same as when I disable the fasttrack connection
If I have some VLANs. Each of them shall not get more than 10% of the entire bandwidth. Moreover, the Guest-VLAN shall only get 2.
I cannot FastTrack them as they have to go through a simple queue, don’t they?