I’m experiencing some navigation issues (website latency or hung, timeout during web bandwidth tests etc.) that disappear once fasttrack rules are disabled on ip firewall filter.
I’m using two wan PCC as per http://mum.mikrotik.com/presentations/US12/steve.pdf instructions.
What can I check and what could be the cause ?
Fasttrack rule is the one included in basic firewall settings:
**add comment=“accept ICMP” chain=input action=accept protocol=icmp **
**add comment=“accept establieshed,related” chain=input action=accept connection-state=established,related **
**add comment=“drop all from WAN” chain=input action=drop in-interface=ether9 **
**add comment=“drop all from WAN” chain=input action=drop in-interface=ether10 **
**add comment=“fasttrack” chain=forward action=fasttrack-connection connection-state=established,related **
**add comment=“accept established,related” chain=forward action=accept connection-state=established,related **
**add comment=“drop invalid” chain=forward action=drop connection-state=invalid ** add comment=“drop all from WAN not DSTNATed” chain=forward action=drop connection-state=new connection-nat-state=!dstnat in-interface=ether9 add comment=“drop all from WAN not DSTNATed” chain=forward action=drop connection-state=new connection-nat-state=!dstnat in-interface=ether10
I have two other machines with similar configurations both with issue gone once fasttrack rule was disabled
Should perhaps fasttrack to be avoided with PCC ??
Any idea ?
Did you all managed to solve this problem? I’m also load balancing 2 WANs with PCC and having the same problems with browser stalling when FastTrack is on. I’ve managed to solve it but not sure if this is the right way.
What I’ve done is to exclude WAN2 connections from FastTrack.
That’s all I did and it seems to be working. FastTrack is back on and everything is ok so far. CPU usage on my RB2011 is down from 80% to 50% when routing at 60mbps. The WANs are 30mbps each.