I hava a openvpn tun client on centos7(ip addr: 192.168.88.111)
iptables -t nat -A POSTROUTING -d 10.19.0.0/16 -o tun_go_aws -j MASQUERADE
# 10.19.0.0/16 Its my aws private cidr
on openwrt I add a static route, as a lan gateway to connect aws. and everything works fine.
10.19.0.0/16 192.168.88.111
but, on mikrotik(RB750Gr3), I add a same static route too, everything work slow.
especially establish, like ssh to server or open http request, it always toke like 10s.
If you (still) have fasttracking enabled (there’s a rule with action=fasttrack), then try to disable it. Fasttracking interferes with many things if the rule is not adjusted according to particular use case and symptoms are often same as what you observe.
disable fasttrack not work for me.
but from this http://forum.mikrotik.com/t/weird-behaviour-slowness-of-openvpn-traffic-routing-in-some-cases/109069/1
/ip firewall filter add place-before=1 chain=forward action=accept dst-address=10.19.0.0/16
work for me 