May I please ask which ports were wan and lan?
You might want to post a new topic with the details. It shouldn't matter which port you're using if your issue is ~400Mb/s PPPoE connection, when you feel it should be higher. In fact, issue may not be RB5009 and be elsewhere, or more subtle config issue.
Already done and dusted, here just wanted to signal, there might be surprises. It happened to me, to others as well if I search around, who knows for the others ...
All physical ports of the RB5009 are in the same bridge with Bridge VLAN Filtering enabled. PPPoE sits over vlan1000 which has the sfp-sfpplus1 as access port. A 9 years old GPON module is plugged into sfp-sfpplus1.
My PC is connected to a switch that is plugged into ether1. This setup can achieve 2.3Gbps down and 1Gbps up on speedtest.net (if I dial the same PPPoE account provided by my ISP 3 times and use ECMP). Download is then limited by GPON, not by the RB5009. And upload is probably by my ISP (GPON has 1.2Gbps limit for upload).
As I pointed in your thread, your config is likely off, the ports doesn't matter at all.
LAN is eth1 (synced at 1Gbps). WAN is the SFP+, using one DFP-34X-2C2.
My ISP limits the connection at 1Gbps up/down - but they do it at PPPoE level, so I get a little less than that.
any idea what’s going on with the “wireless-for-home-and-office” section? hAP be³ Media is no longer present in there… and when looking at the drop-down features selector there is no longer any mention of WiFi 7 in the wireless standards product filter selector. Has the hAP be3 been recalled? it is no longer listed at all as a product in the list of models available there. Or is this a site bug ?
It's still in the Ethernet Routers category: MikroTik · Ethernet Routers
Looking at the recent edit in the documentation:
Page Comparison - hAP be³ Media (v.5 vs v.6) - User manuals - MikroTik Documentation
where any mentions of "home" have been replaced, it probably looks like MikroTik no longer position this device as a home-focused device, but something more professional.
The professional all-in-one platform for routing, services, containers, and modern network workloads.
i …see what’s happening.
The USA FCC foreign router ban is affecting MikroTik consumer routers… so they just decided to re-classify them as professional use devices because professional / industrial devices are not (yet) affected by the FCC ban. Only home / consumer routers are affected.
GamersNexus posted this related video today: https://www.youtube.com/watch?v=qjesRkTFZqY
From the hap be3 product page:
And if you think containers are complicated – think again! We’ve included a simple one-click setup page in WinBox where you can enable the desired container apps.
From visualizing network topology and hosting lightweight websites to running custom dashboards, security tools or even experimental local AI assistants, containers open the door to a whole new set of possibilities
What are these marketing guys dreaming of? A low cost arm device with 2g of ram. What kind of AI assistant should or could be running there?
Clippy from MS Office 97 maybe lightweight enough. But modern clippy probably needs a dedicated nuclear reactor - while delivering the same quality help.
In fairness, that's more true than not. Happy to testify - although not sure Mr. Carr will take my call – none of my deployed hXXyyZ things are used in any homes. And point anyone to /routing/bgp or /routing/isis or /iot/... etc etc. It's an easy argument to make. In reality, they orginally mis-classifed some of these as "home routers" in the first place. 
i wish hAP be³ Media would have at least one or two 10G (or 25G) SFP+ slots… then i’d think of it as professional… with no SFP+ it looks quite odd as far as modern professional devices go.
So SXTsq Embedded LTE4 has ESIM support but wAP ax LTE7 kit does not? How did that happen? 
CCR3232: Well, I’m dreaming of
- High availabilty cluster with two of those
- Next Generation Firewall add on with IPS, Antivirus, SSL inspection
Unfortunately those do not exist (yet), so I have to buy expensive overpriced firewalls from Fortinet.
There's a reason for those functions you're mentioning to be "expensive" ... I'm not sure if they're actually "overpriced" as there are situations which require such functionality and using it can prevent much greater damage. And for them to be effective, maintenance of those functions (by vendor) has to be prompt and thorough ... unfortunately these qualities are not something most people attribute to MT. And such commitment is not cheap either, vendor needs quite a team of (well paid) experts.
So yes ... keep dreaming.
The CPU in CCR3232 is 1.7 Ghz, so single threaded workloads probably is not going to be its strongest point.
It does, however, come with 8 channel memory and 128 PCIe lanes which is a lot of bandwidth. Amper Altra is said to deliver "consistent frequency" that in turn guaranties predictable application latency.
Given a lot of bandwidth, CCR3232 for container workloads makes sense. Not the fastest but predictably consistent performance.
...
I am dreaming ....If only ARM architecture could offer the same variety of applications as x86/ amd64 