I can confirm on my CHR Hyper-V system that Cake works on my Download simple Queue and on myUpload Queue tree. After the install on my 128MB systems I am using 17.8 MB of 91.2MB.
I have been using wave2 AP’s from the competitor for quite some time.
Currently it looks like they use about 40MB of the 256MB of flash, and 135MB of the 512MB of available RAM (plus 40MB for buffers).
It looks like with the traditional 128MB of flash, and at least 256MB of RAM (the notes say “more than” but it looks like they mean “at least”) it would have worked just fine.
But indeed, there appear to be some technical reasons to limit to 16MB of flash.
As a workaround, I think the suggestion to load software from another device, like the CAPsMAN or some other MikroTik router in the network, would be a nice one.
(just to load the 10MB that the driver apparently takes from that external device into RAM during boot)
It could even be considered to load it from an internet server (at MikroTik or elsewhere). Of course in that case there should be some fallback when it is not available.
RB4011 wifi model - upgraded fine, works
hAP ac (running as cap) - upgraded fine, works
Mikrotik Audience (running as cap) - management hangs about every half hour to hour, going into mac winbox connects but interfaces/wireless menu is empty. Reboot fixes it for another half hour to an hour. Tried resetting the config on it in case it was a config problem brought forward from 7.1beta2 but that did not help. I am probably going to have to downgrade it to 7.1beta2.
I appreciate your test reports as we seem to be having the same issues. I’m with Bell in Canada and they also use baby jumbo frames on a SFP ONT with PPPoE. So I see the same crashing and MTU issues you are seeing.
One reason more not to buy any WiFi device from Mikrotik, until this is clear
You missed my update in that same posting. I don’t expience the crashing anymore but a MTU of 1500 or even 1508 (rfc4638) is not working. Because 7.1betaX is not working at all with me I don’t see the effort of rewiring my fiber to a NTU and connect it to a ether port to see it probally still not working.
The SFP is fine and it has a MTU of 1592.
My previous attempt was worse and now it works much better: v7.1beta2 [development] is released!
Every new 7-beta release brings amazing features. Lets just hope that they eventually become stable as well 
ROS v6 was stable at my customers at v6.3, v6.4, v6.19 and newer. If I again must wait for ros v7.20 then this will be not good for my business.
That’s why, now I test ros7 too as testing rabbit, and try detect bugs and report all problems what I found.
This is only way to start with v7, report all bug and be a tester itself.
This is still present and had this when enabling/disabling logging in RAW rules.
http://forum.mikrotik.com/t/v7-1beta2-development-is-released/142356/1
The first rules counter had a life of their own.
Beta 3 on my RB4011iGS+ crashes immediately after boot unfortunately. It runs just for 10-20 seconds and crashes then.
Any spontaneously idea?
I’ll post an export when I have more time. Even with hide-sensitive there are way too many ip addresses shown that I don’t want to post.
But I actually don’t have any special things going on on that router. Just simple things .. some firewall rules, nat, but no queues, no vpn, nothing.
/edit: Ok, had time 
/interface bridge
add igmp-snooping=yes name=main_bridge
/interface ethernet
set [ find default-name=ether1 ] advertise=10M-half,10M-full auto-negotiation=no comment="Zum SW_KellerMini"
set [ find default-name=ether2 ] advertise=10M-half,10M-full auto-negotiation=no comment="WAN FTTH"
set [ find default-name=ether9 ] advertise=10M-half,10M-full auto-negotiation=no comment="Server IPMI"
set [ find default-name=ether10 ] advertise=10M-half,10M-full auto-negotiation=no comment="Unifi AP"
set [ find default-name=sfp-sfpplus1 ] advertise=10M-half comment="Zum SW_Keller"
/interface vlan
add arp=local-proxy-arp interface=main_bridge name=DMZ vlan-id=4050
add interface=main_bridge name=FREIFUNK vlan-id=31
add interface=main_bridge name=FREIFUNK_GW vlan-id=30
add interface=main_bridge name=INET_FTTH vlan-id=4001
add interface=main_bridge name=IPV6_ONLY vlan-id=66
add interface=sfp-sfpplus1 name=VOIP vlan-id=21
add interface=main_bridge name=WAN_LTE vlan-id=4010
add interface=ether1 name=WAN_VDSL vlan-id=4005
/interface ethernet switch port
set 0 default-vlan-id=0
set 1 default-vlan-id=0
set 2 default-vlan-id=0
set 3 default-vlan-id=0
set 4 default-vlan-id=0
set 5 default-vlan-id=0
set 6 default-vlan-id=0
set 7 default-vlan-id=0
set 8 default-vlan-id=0
set 9 default-vlan-id=0
set 10 default-vlan-id=0
set 11 default-vlan-id=0
/interface list
add name=LAN
add name=WAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip vrf
add list=all name=main
/user group
add name=prometheus policy="read,winbox,api,!local,!telnet,!ssh,!ftp,!reboot,!write,!policy,!test,!password,!web,!sniff,!\
sensitive,!romon,!dude,!tikapp"
/interface bridge port
add bridge=main_bridge interface=ether10
add bridge=main_bridge interface=ether9
add bridge=main_bridge interface=sfp-sfpplus1 internal-path-cost=0 path-cost=5
add bridge=main_bridge interface=ether1 path-cost=15
/interface bridge vlan
add bridge=main_bridge comment=INET_FTTH tagged=sfp-sfpplus1,ether1 vlan-ids=4001
add bridge=main_bridge comment=WAN_VDSL tagged=sfp-sfpplus1,ether1 vlan-ids=4005
add bridge=main_bridge comment=WAN_LTE tagged=sfp-sfpplus1,ether1 vlan-ids=4010
add bridge=main_bridge comment=IPV6_ONLY tagged=sfp-sfpplus1 vlan-ids=66
add bridge=main_bridge comment=FREIFUNK tagged=sfp-sfpplus1,ether1 vlan-ids=30
add bridge=main_bridge comment=FREIFUNK_GW tagged=sfp-sfpplus1,ether1 vlan-ids=31
add bridge=main_bridge comment=DMZ tagged=ether1,sfp-sfpplus1 vlan-ids=4050
/interface list member
add interface=main_bridge list=LAN
add interface=WAN_VDSL list=WAN
add interface=ether2 list=WAN
add interface=VOIP list=LAN
add interface=IPV6_ONLY list=LAN
add interface=WAN_LTE list=WAN
add interface=INET_FTTH list=LAN
add interface=FREIFUNK list=LAN
add interface=FREIFUNK_GW list=LAN
add interface=DMZ list=WAN
/ip address
add address=10.255.0.18/29 interface=WAN_VDSL network=10.255.0.16
add address=192.168.99.1/24 interface=VOIP network=192.168.99.0
add address=192.168.95.11/24 interface=WAN_LTE network=192.168.95.0
add address=10.255.0.1/29 interface=INET_FTTH network=10.255.0.0
add address=192.168.90.1/24 interface=main_bridge network=192.168.90.0
add address=10.200.250.1/28 interface=FREIFUNK_GW network=10.200.250.0
add address=10.200.255.1/28 interface=FREIFUNK network=10.200.255.0
add address=10.250.254.252 interface=DMZ network=10.250.254.252
/ip dhcp-client
add default-route-distance=2 disabled=no interface=ether2
/ip dns
set allow-remote-requests=yes
/ip firewall address-list
add address=103.53.48.0/23 list=Twitch
add address=185.42.204.0/22 list=Twitch
add address=192.108.239.0/24 list=Twitch
add address=192.16.64.0/21 list=Twitch
add address=199.9.248.0/21 list=Twitch
add address=23.160.0.0/24 list=Twitch
add address=45.113.128.0/22 list=Twitch
add address=52.223.192.0/20 list=Twitch
add address=52.223.208.0/21 list=Twitch
add address=52.223.224.0/20 list=Twitch
add address=52.223.240.0/20 list=Twitch
add address=99.181.64.0/20 list=Twitch
add address=99.181.80.0/21 list=Twitch
add address=99.181.88.0/21 list=Twitch
add address=99.181.96.0/19 list=Twitch
add address=192.168.90.81 comment=deep-thought.home list=LoadBalancingSrcs
add address=192.168.90.21 comment=datengrab.home list=LoadBalancingSrcs
add address=192.168.201.0/24 comment=Stallnetz list=NichtUeberGateway
add address=10.200.255.0/28 comment=freifunk-APs list=NichtUeberGateway
add address=10.200.250.0/28 comment=freifunk-GWs list=NichtUeberGateway
add address=192.168.94.0/24 comment=freifunk-Client list=NichtUeberGateway
add address=192.168.99.0/24 comment=VoIP-Netz list=NichtUeberGateway
add address=[IP ADDRESS] comment="[A COMMENT]" list=NichtUeberGateway
add address=[IP ADDRESS] comment="[A COMMENT]" list=NichtUeberGateway
add address=[IP ADDRESS] list=whitelistInvalid
add address=116.203.7.21 list=whitelistInvalid
add address=10.201.111.2 list=whitelistInvalid
add address=10.201.112.2 list=whitelistInvalid
add address=10.201.113.2 list=whitelistInvalid
add address=[IP ADDRESS] list=whitelistInvalid
add address=[IP ADDRESS] list=whitelistInvalid
add address=[IP ADDRESS] comment="[A COMMENT]" list=NichtUeberGateway
add address=[IP ADDRESS] comment="[A COMMENT]" list=NichtUeberGateway
add address=[IP ADDRESS] comment="[A COMMENT]" list=NichtUeberGateway
add address=[IP ADDRESS] list=whitelistInvalid
add address=192.168.201.0/24 list=whitelistInvalid
add address=10.132.101.0/24 comment=VPN list=NichtUeberGateway
add address=10.55.55.11 comment=Stallnetz list=NichtUeberGateway
add address=192.168.90.0/24 list=whitelistInvalid
add address=[IP ADDRESS] list=Freifunk_GWs
add address=[IP ADDRESS] list=Freifunk_GWs
add address=[IP ADDRESS] list=Freifunk_GWs
add address=[IP ADDRESS] list=Freifunk_GWs
add address=[IP ADDRESS] list=Freifunk_GWs
add address=[IP ADDRESS] list=Freifunk_GWs
add address=192.168.1.1 comment=freifunk-Client list=NichtUeberGateway
add address=10.255.0.17 comment=VDSL-Modem list=NichtUeberGateway
/ip firewall filter
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=output comment="defconf: accept ICMP" log=yes protocol=icmp
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=\
established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN log=yes
add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=\
established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid dst-address-list=\
!whitelistInvalid log-prefix=dropInvalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
connection-state=new in-interface-list=WAN
/ip firewall mangle
add action=mark-connection chain=prerouting comment="Mark Twitch" connection-mark=no-mark dst-address-list=Twitch \
dst-address-type=!local in-interface-list=LAN new-connection-mark=Streaming passthrough=yes
add action=mark-routing chain=prerouting comment="Routing Mark Streaming" connection-mark=Streaming in-interface-list=\
LAN passthrough=no
add action=mark-connection chain=prerouting comment="Mark Freifunk" dst-address-list=Freifunk_GWs new-connection-mark=\
Freifunk passthrough=yes
/ip firewall nat
add action=masquerade chain=srcnat out-interface-list=WAN
add action=masquerade chain=srcnat comment="NAT bei fritz.box, sonst kein Login m\F6glich" dst-address=192.168.99.13 \
out-interface=VOIP
/ip route
add check-gateway=ping distance=3 dst-address=0.0.0.0/0 gateway=10.255.0.17 pref-src="" scope=30 target-scope=10 type=\
unicast
add check-gateway=ping distance=5 dst-address=0.0.0.0/0 gateway=192.168.95.1 type=unicast
add dst-address=192.168.201.0/24 gateway=192.168.90.60 type=unicast
add comment="[A COMMENT]" distance=1 dst-address=[IP ADDRESS] gateway=192.168.90.60 pref-src="" \
scope=30 target-scope=10 type=unicast
add comment="[A COMMENT]" distance=1 dst-address=[IP ADDRESS] gateway=192.168.90.60 pref-src=\
"" scope=30 target-scope=10 type=unicast
add comment="[A COMMENT]" distance=1 dst-address=[IP ADDRESS] gateway=192.168.90.60 pref-src="" \
scope=30 target-scope=10 type=unicast
add comment="[A COMMENT]" distance=1 dst-address=[IP ADDRESS] gateway=192.168.90.60 pref-src="" \
scope=30 target-scope=10 type=unicast
add comment="[A COMMENT]" distance=1 dst-address=[IP ADDRESS] gateway=192.168.90.60 pref-src="" \
scope=30 target-scope=10 type=unicast
add distance=1 dst-address=10.201.111.0/24 gateway=192.168.90.60 pref-src="" scope=30 target-scope=10 type=unicast
add distance=1 dst-address=10.201.112.0/24 gateway=192.168.90.60 pref-src="" scope=30 target-scope=10 type=unicast
add distance=1 dst-address=10.201.113.0/24 gateway=192.168.90.60 pref-src="" scope=30 target-scope=10 type=unicast
/ipv6 address
add address=::[SUFFIX] eui-64=yes from-pool=DG interface=IPV6_ONLY
add address=::[SUFFIX] eui-64=yes from-pool=DG interface=VOIP
add address=::[SUFFIX] eui-64=yes from-pool=DG interface=INET_FTTH
/ipv6 dhcp-client
add add-default-route=yes interface=ether2 pool-name=DG request=address,prefix
/ipv6 firewall address-list
add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
add address=::1/128 comment="defconf: lo" list=bad_ipv6
add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
add address=100::/64 comment="defconf: discard only " list=bad_ipv6
add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
add address=::224.0.0.0/100 comment="defconf: other" list=bad_ipv6
add address=::127.0.0.0/104 comment="defconf: other" list=bad_ipv6
add address=::/104 comment="defconf: other" list=bad_ipv6
add address=::255.0.0.0/104 comment="defconf: other" list=bad_ipv6
add address=[AN IPV6 ADDRESS] list=[A HOSTNAME]
/ipv6 firewall filter
add action=accept chain=forward dst-address=[AN IPV6 ADDRESS] dst-port=44201 \
in-interface-list=WAN out-interface-list=LAN protocol=udp
add action=accept chain=forward in-interface-list=LAN out-interface-list=WAN protocol=udp src-address=\
[AN IPV6 ADDRESS] src-port=44201
add action=accept chain=forward in-interface-list=LAN out-interface-list=WAN
add action=drop chain=forward connection-state=invalid
add action=drop chain=forward connection-state=new,untracked in-interface-list=WAN
add action=drop chain=input disabled=yes in-interface-list=!LAN log=yes
add action=accept chain=forward dst-port=15151-15153 in-interface-list=WAN out-interface-list=LAN protocol=tcp
add action=accept chain=forward dst-port=15151-15153 in-interface-list=WAN out-interface-list=LAN protocol=udp
add action=accept chain=forward dst-port=5201 in-interface-list=WAN out-interface-list=LAN protocol=tcp
add action=accept chain=forward in-interface-list=LAN out-interface-list=WAN
add action=accept chain=forward connection-state=established,related,untracked disabled=yes
add action=drop chain=forward connection-state=invalid
add action=drop chain=forward connection-state=invalid,new,untracked in-interface-list=WAN out-interface-list=LAN
add action=drop chain=forward connection-state=new,untracked in-interface-list=WAN
add action=drop chain=input disabled=yes in-interface-list=!LAN log=yes
/ipv6 firewall mangle
add action=mark-packet chain=prerouting connection-mark=Stall new-packet-mark=Stal
add action=mark-packet chain=prerouting connection-mark=Stall new-packet-mark=Stal
add action=mark-connection chain=prerouting dst-address=[AN IPV6 ADDRESS] dst-port=44201 \
new-connection-mark=Stall passthrough=yes protocol=udp
add action=mark-connection chain=prerouting dst-address-list=[A HOSTNAME] new-connection-mark=[A HOSTNAME] \
passthrough=yes
add action=mark-packet chain=prerouting connection-mark=Stall new-packet-mark=Stall passthrough=no
add action=mark-packet chain=prerouting connection-mark=[A HOSTNAME] new-packet-mark=[A HOSTNAME] \
passthrough=no
/ipv6 nd
set [ find default=yes ] managed-address-configuration=yes ra-delay=5s ra-lifetime=15m retransmit-interval=15s
/ipv6 nd prefix default
set preferred-lifetime=15m valid-lifetime=15m
/system clock
set time-zone-name=Europe/Berlin
/system identity
set name=Router_RB4011
/system package update
set channel=development
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
My CHR seems to be rebooting every 30-45 minutes with no reason in the logs. I think it may be related to the Queue. I tried to change to FQ_CODEL and it went into a reboot loop. I disabled my queue tree and just did a simple queue using CAKE and will see how it runs.
Edit it seems that the Cake Queue is causing the reboot as well. Not sure what is causing this. On one of the reboots I noticed the error System is deadlocked on memory on the VM console.
*) other fixes and improvements;
Does IPv6 tunnels are fixed with the new release ? If someone can tell me before upgrading for nothing 
thanks
It’s really a joke it’s sad to see that, fortunately I didn’t buy chateau (never buy hardware where there is only beta firmware available on it).
Reporting that on multiple CCR2004 with zero configuration that the system is barely responsive.
Assigning an IP to an interface while using MAC control via winbox then attempting to ssh works periodically, getting a lot of packet loss. Literally nothing running on these (tested on three that all came in the same batch).
Should it be expected that the CCR2004 is not usable with this build?
OSPFv2 is somewhat unstable now, with either broadcast or PTP network type forming neighbor with ROS 6 - “received wrong LS Ack” in log, with ROS 6 router. Appears to result in crashing entire routing stack for a second, causing tunnels to drop and re-establish and also causing BGP peering to break and re-establish.
When the routing stack crashes, a default route received via DHCP disappears. I’ve had to create a static default route instead.
Finally! That was one long wait…
I upgraded my Audience today.
Had to factory reset it but when it came up, I saw this error
error while running customized default configuration script: expected end of command (line 1310 column 53)
I was able to get the wireless interface manually but there is really no configuration on the device.
It works fine but no default settings were able to come up
At least we have OpenWrt to provide Wave2 drivers + WPA3 on our hAP ac2s, btw kudos to Mikrotik for hearing user requests and implementing modern queue management algorithms on ROS.
As stated before, the wifiwave2 package is being developed for future products. Devices compatible with the package that are on sale currently are limited to 802.11ac by their hardware.
Oh well, guess I’ll just get a Wifi 6 AP instead. Sad.
Is this a bug or some kinda of new feature, my bridge gets new MAC every time i reboot router (Hex), just installed beta3, so DHCP reservation is messed up as it gets new ip every reboot.