PPPoE Dynamic Queue Set to 10 Mbps but Torch Shows 97 Mbps UDP Traffic

RouterOS General
1

Hello,

We are using a CCR2116-12G-4S+ with RouterOS v7.23.1.

PPPoE users authenticate through a third-party RADIUS server. The RADIUS server creates a dynamic simple queue correctly according to the user's plan.

For the affected user:

Assigned plan: 10 Mbps upload/download
Dynamic queue max-limit: 10M/10M
FastTrack: Not configured

However, when checking the user's PPPoE interface in Torch, we observe continuous UDP upload traffic of approximately 94–97 Mbps.

Example:

Source IP: 102.50.19.138
Protocol: UDP
Traffic: approximately 97 Mbps

The destination IP addresses and destination ports keep changing. We observed destination ports such as UDP 80, 53, and 9097.

The dynamic simple queue is created correctly with a 10M/10M max-limit.

Questions:

  1. Is Torch showing traffic before the dynamic simple queue applies shaping?
  2. Is the 97 Mbps only attempted traffic, while the actual forwarded traffic is still limited to 10 Mbps?
  3. How can we verify the actual traffic after queue shaping?
  4. Could this be abnormal UDP traffic, spoofed traffic, or a RouterOS queue issue?
  5. Is any additional configuration required for RADIUS-created PPPoE dynamic queues?

We do not want to block all UDP traffic because it may affect normal DNS, QUIC, VoIP, gaming, and other services.

Screenshots of Torch and the dynamic queue are attached.

Thank you.

image (5)
image (5)1440×900 131 KB

image (8)
image (8)1440×900 137 KB

2

The Queue is enforced on the NAS, not on the CPE. The CPE can send whatever data it wants to the NAS. It becomes even worse when there is an existing network between the CPE and the NAS that needs to carry that traffic.

Blocking the traffic on the NAS, won't stop the CPE from transmitting it either. It's pointless to firewall it, once it hits the firewall, it already traversed the network.

TCP will slow down due to re-transmissions, UDP (stateless) won't. Either setup a queue manually on the CPE, phone the customer up and ask wt... Or live with it.