NetMetal 5SHP P2p Link TCP poor performance

RouterOS Wireless Networking
1

Hello all. I have 29 km P2P link with NetMetal 5SHP devices. The problem is that on UDP bandwidth test it gives 250 mbit total throughput but on TCP protocol it gives only 100mbit.

Any help please and hints.

UDP
p2p.jpg
TCP
p2p tcp.jpg
AP side

# dec/21/2022 13:24:10 by RouterOS 7.6
# model = RB921UAGS-5SHPacD
/interface bridge
add name=Loopback0
/interface ethernet
set [ find default-name=ether1 ] speed=100Mbps
/interface lte apn
set [ find default=yes ] ip-type=ipv4 use-network-apn=no
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa2-psk mode=dynamic-keys name=NetName12 supplicant-identity=""
/interface wireless
set [ find default-name=wlan1 ] ampdu-priorities=0,1 antenna-gain=30 band=5ghz-onlyac channel-width=20/40/80mhz-XXXX country="north macedonia" \
    default-forwarding=no disabled=no distance=30 frequency=5950 frequency-mode=superchannel installation=outdoor max-station-count=1 mode=ap-bridge \
    multicast-helper=full nv2-downlink-ratio=70 nv2-security=enabled nv2-sync-secret=NetName12  rx-chains=0,1 scan-list=5750,5230,5720,5750,5950,5010 \
    security-profile=NetName12 ssid=TopJak station-roaming=enabled tdma-period-size=auto tx-chains=0,1 wireless-protocol=nv2-nstreme
/interface wireless nstreme
set wlan1 enable-nstreme=yes
/routing bgp template
set default disabled=no output.network=bgp-networks
/routing ospf instance
add disabled=no name=default-v2 router-id=10.1.255.10
/routing ospf area
add disabled=yes instance=default-v2 name=backbone-v2
add area-id=2.2.2.2 default-cost=1 disabled=no instance=default-v2 name=area2-v2 no-summaries type=stub
/ip neighbor discovery-settings
set discover-interface-list=all
/ip settings
set max-neighbor-entries=8192
/ipv6 settings
set disable-ipv6=yes max-neighbor-entries=8192
/interface ovpn-server server
set auth=sha1,md5
/interface wireless align
set filter-mac=CC:2D:E0:92:15:79
/ip address
add address=10.1.255.10 interface=Loopback0 network=10.1.255.10
add address=10.2.4.129/30 interface=wlan1 network=10.2.4.128
add address=10.2.1.11/24 interface=ether1 network=10.2.1.0
/ip cloud
set update-time=no
/ip firewall service-port
set irc disabled=no
/ip route
add disabled=no dst-address=0.0.0.0/32 gateway=10.24.1.1 pref-src=10.24.1.2 scope=10
add disabled=no dst-address=0.0.0.0/32 gateway=10.24.1.1 pref-src=10.24.1.2 scope=10
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/mpls interface
add disabled=no interface=ether1 mpls-mtu=1550
add disabled=no interface=wlan1 mpls-mtu=1550
/mpls ldp
add disabled=no lsr-id=10.1.255.10 transport-addresses=10.1.255.10
/mpls ldp interface
add disabled=no interface=ether1
add disabled=no interface=wlan1
/routing ospf interface-template
add area=area2-v2 disabled=no interfaces=Loopback0 networks=10.1.255.10/32 priority=1
add area=area2-v2 disabled=no interfaces=ether1 networks=10.2.1.0/24 priority=1
add area=area2-v2 disabled=no interfaces=wlan1 networks=10.2.4.128/30 priority=1
/system ntp client
set enabled=yes
/system ntp client servers
add address=10.1.1.1
add address=10.2.1.1
/tool romon
set enabled=yes

Station Bridge

export 
# dec/21/2022 13:32:18 by RouterOS 7.6
#
# model = RB921UAGS-5SHPacD
/interface bridge
add name=Loopback0
/interface lte apn
set [ find default=yes ] ip-type=ipv4 use-network-apn=no
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa2-psk mode=dynamic-keys name=NetName12 supplicant-identity=""
/interface wireless
set [ find default-name=wlan1 ] ampdu-priorities=0,1 antenna-gain=30 band=5ghz-onlyac channel-width=20/40/80mhz-XXXX country="north macedonia" disabled=no \
    frequency=auto frequency-mode=superchannel installation=outdoor mode=station-bridge multicast-helper=full nv2-security=enabled rx-chains=0,1 scan-list=\
    5750,5230,5100,5740,5600,5010,5950 security-profile=NetName12 ssid=TopJak station-roaming=enabled tx-chains=0,1 wireless-protocol=nv2-nstreme
/interface wireless nstreme
set wlan1 enable-nstreme=yes
/routing ospf instance
add disabled=no name=default-v2 router-id=10.1.255.25
/routing ospf area
add disabled=yes instance=default-v2 name=backbone-v2
add area-id=2.2.2.2 default-cost=1 disabled=no instance=default-v2 name=area2-v2 no-summaries type=stub
/ip neighbor discovery-settings
set discover-interface-list=all
/ipv6 settings
set disable-ipv6=yes max-neighbor-entries=8192
/interface ovpn-server server
set auth=sha1,md5
/ip address
add address=10.2.4.1/28 interface=ether1 network=10.2.4.0
add address=10.1.255.25 interface=Loopback0 network=10.1.255.25
add address=10.2.4.130/30 interface=wlan1 network=10.2.4.128
/ip cloud
set update-time=no
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/mpls interface
add disabled=no interface=ether1 mpls-mtu=1550
add disabled=no interface=wlan1 mpls-mtu=1550
/mpls ldp
add disabled=no lsr-id=10.1.255.25 transport-addresses=10.1.255.25
/mpls ldp interface
add disabled=no interface=ether1
add disabled=no interface=wlan1
/routing ospf interface-template
add area=area2-v2 disabled=no interfaces=ether1 networks=10.2.4.0/28 priority=1
add area=area2-v2 disabled=no interfaces=Loopback0 networks=10.1.255.25 priority=1
add area=area2-v2 disabled=no interfaces=wlan1 networks=10.2.4.128/30 priority=1
/system ntp client
set enabled=yes
/system ntp client servers
add address=10.1.1.1
/tool romon
set enabled=yes
2

You are exploring the traffic generation capabilities of the QCA9557 NetMetal 5SHP processor very qualitatively. It has indirect relevance to the ability of the radio bridge to pass traffic.
That is, this problem is easily solved by replacing the processor with a more powerful one that will generate traffic.

Never use a device on which you measure bandwidth as a traffic generator!

You have a very low link quality of 50%. Better take care of this problem. First of all disable the short guard interval, you have a 29 km link.
On the screenshot, you can see that one of the experiments works only 1 Chain, and the other two, this should not be the problem to fix.
I would use the 40 MHz band if I were you, I would get a more stable link.
Why is the ether1 speed limited to 100 mbps?
In general, the devices that make up the radio bridge should only be engaged in passing traffic, no other functions such as routing should be assigned to them.