hex poe bridge SLOW

hello ,
i ask for some advice / help.
i have a hex poe lite with the problem that it’s not passing over 50-60mbit of traffic between lan ports that are in bridge.
the hex poe is “sitting” between 2 ptp links and is bridging together those links, PLUS it’s routing internet for the person that is using it on that location.
ptp links are capable of passing 100+mbits of traffic at the same time by themselves. they were doing it for years while there was a stupid switch between them, now i just threw away the stupid switch and installed a hex poe lite device so i have power control and i can separate networks.
test ptp1<->HEX goes 100mbit
test ptp2<->HEX goes 100mbit
test ptp1->ptp2 goes 50mbit
test ptp1<-ptp2 goes 100mbit

bypassing the hex ptp1<->ptp2 goes 100mbits.
i have 2 bridges, bridge1 is my network, bridge2 is network to be used on location (bridge2 is routed).
eth1 and eth5 are in bridge2 , eth2,3,4 are my devices and are in bridge1.
i have problem of speed inside bridge1.

config:

/interface ethernet
set [ find default-name=ether1 ] name=ether1-TPLinkGORE
set [ find default-name=ether2 ] name=ether2-LHG
set [ find default-name=ether3 ] name=ether3-Powerbeam poe-out=forced-on
set [ find default-name=ether4 ] name=ether4-NBE13AC poe-out=off
/interface bridge
add name=bridge1
add name=bridge2-sandi
/ip pool
add name=dhcp_pool0 ranges=192.168.30.20-192.168.30.254
/ip dhcp-server
add address-pool=dhcp_pool0 disabled=no interface=bridge2-sandi lease-time=1w \
    name=dhcp1
/queue simple
add burst-time=15s/15s max-limit=15M/50M name=queue1-sandi target=\
    bridge2-sandi
/interface bridge port
add bridge=bridge1 interface=ether2-LHG
add bridge=bridge1 interface=ether3-Powerbeam
add bridge=bridge1 interface=ether4-NBE13AC
add bridge=bridge2-sandi interface=ether1-TPLinkGORE
add bridge=bridge2-sandi interface=ether5
/ip address
add address=192.168.2.13/24 interface=bridge1 network=192.168.2.0
add address=192.168.30.1/24 interface=bridge2-sandi network=192.168.30.0
/ip dhcp-server network
add address=192.168.30.0/24 dns-server=1.1.1.1,8.8.8.8 gateway=192.168.30.1
/ip dns
set servers=1.1.1.1,8.8.8.8
/ip firewall filter
add action=fasttrack-connection chain=forward connection-state=\
    established,related disabled=yes
add action=accept chain=forward connection-state=established,related \
    disabled=yes
/ip firewall nat
add action=masquerade chain=srcnat
/ip firewall service-port
set sip disabled=yes
/ip route
add distance=1 gateway=192.168.2.1
/ip service
set www disabled=yes
/routing bfd interface
set [ find default=yes ] disabled=yes
/system identity
set name="Sandi POE"

this is fairly simple config.
i can only think that the problem is - that i did NOT reset the hex prior to mounting, it’s running the default out-of-the-box config and ros version is 6.48.6

I am NOT the expert on bridges in RouterOS, but read up on hardware offloading.
OK, I admit that I can spell bridge and that’s about all I know about them in RouterOS (I don’t use any bridges in RouterOS)

Sounds like a TWO VLAN SETUP.

one vlan carries the PTP link from one port to another, no dhcp no nothing lets say port3 and port4
the other vlan is the subnet for the local user lets say port 2
where is the internet coming from? assuming plugged into ether1

The GardePro E8 is a Wi-Fi trail camera. Built-in Wi-Fi and Bluetooth module for enhanced and stable WiFi signal. GardePro Mobile app is free to use. GardePro E8 Trail Camera review

Might require upgrade to ROS7 to have that working properly on Hex.

The only hEX I have is the RB760iG hEX S based on the MediaTek MT7621 SoC. The hEX PoE is based on the QCA8337 switch chip. I think the bridge can be hardware accellerated, but that it does not allow vlan-filtering to be hardware assited.

See Hex PoE VLAN setup (are switch and bridge VLAN setups equal in terms of features?) and specifically post #5 which states “indeed using the switch chip natively increases the performance 5x (going from ~200Mbit/s when using just one interface to 1Gbit/s per each interface)”