How to limit speed for Wireguard Users

RouterOS Beginner Basics
1

Hello, How can I put some rules on my Wireguard clients to not exceed the given speed like 5-10/Mbps

[rafaycivil@MikroTik] > /export
# 2023-11-29 07:56:06 by RouterOS 7.10.2
# software id = 
#
/interface ethernet
set [ find default-name=ether1 ] disable-running-check=no name=ether4
set [ find default-name=ether2 ] disable-running-check=no name=ether5
/interface wireguard
add listen-port=13231 mtu=1420 name=wireguard1
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=wireguard ranges=10.10.0.2-10.10.0.254
/port
set 0 name=serial0
/ipv6 settings
set max-neighbor-entries=15360
/interface wireguard peers
add allowed-address=10.10.0.2/32 interface=wireguard1 public-key=\
    "u+2qjZlKkQjUZsDmE42Ak/ZubablL0IDDKen0NbTrjM="
/ip address
add address=10.10.0.1/24 interface=wireguard1 network=10.10.0.0
/ip dhcp-client
add interface=*1
add interface=*2
add interface=*3
add interface=ether4
add interface=ether5
/ip dns
set allow-remote-requests=yes servers=1.1.1.1,8.8.8.8
/ip firewall nat
add action=masquerade chain=srcnat src-address=10.10.0.0/24
/ip route
add disabled=no dst-address=0.0.0.0/0 gateway=38.xx.xx.xx routing-table=main \
    suppress-hw-offload=no
/system note
set show-at-login=no
/system scheduler
add name=myscheduler on-event=ipscript1 policy=\
    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
    start-time=startup
add name=myscheduler2 on-event=ipscript2 policy=\
    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
    start-time=startup
add name=myscheduler3 on-event=ipscript3 policy=\
    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
    start-time=startup
add name=myscheduler4 on-event=ipscript4 policy=\
    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
    start-time=startup
add name=myscheduler5 on-event=ipscript5 policy=\
    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
    start-time=startup
add name=myscheduler6 on-event=ipscript6 policy=\
    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
    start-time=startup
/system script
add dont-require-permissions=no name=ipscript1 owner=admin policy=\
    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=\
    "/ip dhcp-client add interface=ether3 disabled=no;"
add dont-require-permissions=no name=ipscript2 owner=admin policy=\
    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=\
    "/ip dhcp-client add interface=ether4 disabled=no;"
add dont-require-permissions=no name=ipscript3 owner=admin policy=\
    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=\
    "/ip dhcp-client add interface=ether5 disabled=no;"
add dont-require-permissions=no name=ipscript4 owner=admin policy=\
    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=\
    "/ip dhcp-client add interface=ether6 disabled=no;"
add dont-require-permissions=no name=ipscript5 owner=admin policy=\
    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=\
    "/ip dhcp-client add interface=ether7 disabled=no;"
add dont-require-permissions=no name=ipscript6 owner=admin policy=\
    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=\
    "/ip dhcp-client add interface=ether8 disabled=no;"
2

Use simple queue ?

3

I have done that successfully, I have another question, If more bandwidth is available how can I allow my clients to burst the limit until the extra bandwidth is available? can you please send the screenshot of the options or send me the commandline, thank you.

4

https://help.mikrotik.com/docs/display/ROS/Queues

https://www.youtube.com/watch?v=tnzxrt6bgbs&pp=ygUPcXVldWVzIG1pa3JvdGlr

5

hi guys if i use simple queue for wiregurd to limit speed it will limit hole wiregurd interface or just peers speed?

6

hopefully @rafay will post back with his findings.
Also it would be nice to have a sample of his queue config to help others!!

7

How I understood queues work conceptually:
If you set it on interface, it’s all.
If you want peers, use their ip address.