FastTrack with Mangle Rules

RouterOS General
1

Hi Guys,

I am using mangle rules to mark the connections then the packets in the pre routing and post routing chains so that i can pick up the packets and drop them into queue trees.

We have a number of 3011s deployed that are having high CPU usage during peak times. I disabled the mangle rules for testing and this dropped the CPU usage massivly.

If i was to enable fasttrack on these routers, would my mangle rules and queue trees still work?

I plan to do it as below.

/ip firewall filter add chain=forward action=fasttrack-connection connection-state=established,related
/ip firewall filter add chain=forward action=accept connection-state=established,related

Thanks.

2

http://wiki.mikrotik.com/wiki/Manual:Wiki/Fasttrack

Fasttracked packets bypass firewall, connection tracking, simple queues, queue tree with parent=global, ip traffic-flow(restriction removed in 6.33), ip accounting, ipsec, hotspot universal client, vrf assignment

3

What means parent=global here ? Is it possible to add a Queue when i use my bridge or waninterface as parent ?

4

http://wiki.mikrotik.com/wiki/Manual:Queue
parent (Name of , or none) : assigns this queue as a child queue for selected target. Target queue can be HTB queue or any other previously created queue
global - you can see in this diagram - http://mikrotik-trainings.com/docs/MikroTik_PacketFlow_Routing.jpg

Why not? I think all routed traffic from/to bridge or interface specified will be processed by such queue…