Very slow wan upload speed over RB750G

Hi all -

We recently switched to a new internet connection (fiber 20/20) and we have problems with our upload speed if connected via our RB750G.

  • Connected directly (notebook), i get the full 20/20 with the speedtest of our provider
  • Connected via RB750G, i only get 20/2 to 20/3 with the same speedtest

I’m the only one producing traffic - this is a result of multiple speedtests so it shows an overall image.

  • WinBox 6.12 on RB750G
  • No queues are configured
  • No flow control configured
  • No traffic shaping asfaik: where should i take a look?

anyone a hint what could be wrong or where to look?

many thanks in advance!

  • Johannes

uprgade to 6.15 and put

“/export compat”

results on the forum.

/export compact is not needed as /export command automatically produces compact output on these versions. :slight_smile:

I know…

I know you know. But jjarolim maybe not.

I not want jjarolim for his own idea put “/export verbose”.
For not misunderstand and be clear, “/export compact” is better…

Were you able to resolve your issue? I have having the same problem with nearly all Mikrotiks across fiber circuits. We have checked the MTUs, port speed duplex/negotiation settings/etc. On average I get about half of the available upload speed - download speed is usually okay (close to full speed). If I connect a notebook directly, I receive no speed issue. As soon as I add Mikrotik, I have the same issue that you are experiencing. I have even used a Cloud Core Router for testing.

I am sorry to rebounce this post again but I have the same problem.

Our ISP is delivering 300 / 300 MBit but the real output is current 300 MBit download / 4 MBit upload.

The net is shared between other companies but doing the test around the Mikrotik router shows full bandwith of 300 / 300 MBit. So I assume the problem must be in our RB750GR2. Could someone please take a look at my current router configuration and see if they can spot an issue within it?

Thanks in advance.

# apr/06/2018 16:52:21 by RouterOS 6.41.3
# software id = 79NE-WWU7
#
# model = RouterBOARD 750G r2
# serial number = 64FB0618613C
/interface bridge
    add admin-mac=AA:AA:AA:AA:AA:AA arp=proxy-arp auto-mac=no comment=\
        "created from master port" name=bridge1 protocol-mode=none
/interface ethernet
    set [ find default-name=ether2 ] arp=proxy-arp name=ether2-master speed=1Gbps
/interface list
    add exclude=dynamic name=discover
    add name=mactel
    add name=mac-winbox
/interface wireless security-profiles
    set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
    set [ find default=yes ] html-directory=flash/hotspot
/ip pool
    add name=default-dhcp ranges=192.168.88.10-192.168.88.254
    add name=sstp-dhcp ranges=10.0.2.1-10.0.2.10
/ip dhcp-server
    add address-pool=default-dhcp authoritative=after-2sec-delay interface=bridge1 \
        name=defconf
/ppp profile
    add local-address=sstp-dhcp name=sstp-profile remote-address=sstp-dhcp \
        use-encryption=required
/snmp community
set [ find default=yes ] addresses=0.0.0.0/0
/interface bridge port
    add bridge=bridge1 interface=ether4
    add bridge=bridge1 interface=ether5
    add bridge=bridge1 interface=ether2-master
/ip neighbor discovery-settings
    set discover-interface-list=discover
/interface list member
    add interface=bridge1 list=discover
    add interface=ether3 list=discover
    add interface=ether4 list=discover
    add interface=ether5 list=discover
    add interface=bridge1 list=mactel
    add interface=bridge1 list=mac-winbox
/interface sstp-server server
    set authentication=mschap2 certificate=ca.crt_0 default-profile=sstp-profile \
        enabled=yes force-aes=yes pfs=yes
/ip address
    add address=192.168.88.1/24 comment=defconf disabled=yes interface=bridge1 \
        network=192.168.88.0
    add address=10.0.0.1/24 interface=bridge1 network=10.0.0.0
    add address=xxx.xxx.xxx.43/29 interface=ether1 network=xxx.xxx.xxx.40
    add address=xxx.xxx.xxx.44/29 interface=ether1 network=xxx.xxx.xxx.40
    add address=172.16.1.1 interface=ether3 network=255.255.255.0
/ip dhcp-client
    add comment=defconf dhcp-options=hostname,clientid disabled=no interface=ether1
/ip dhcp-server network
    add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
/ip dns
    set allow-remote-requests=yes servers=8.8.8.8
/ip dns static
    add address=192.168.88.1 name=router
/ip firewall filter
    add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
    add action=accept chain=input comment="defconf: accept established,related" \
        connection-state=established,related
    add action=accept chain=input dst-address=xxx.xxx.xxx.44 dst-port=443 protocol=\
        tcp
    add action=drop chain=input comment="defconf: drop all from WAN" in-interface=\
        ether1
    add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
        connection-state=established,related
    add action=accept chain=forward comment="defconf: accept established,related" \
        connection-state=established,related
    add action=drop chain=forward comment="defconf: drop invalid" connection-state=\
        invalid
    add action=drop chain=forward comment=\
        "defconf:  drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
        connection-state=new in-interface=ether1
/ip firewall nat
    add action=masquerade chain=srcnat comment="defconf: masquerade" out-interface=\
        ether1
    add action=dst-nat chain=dstnat comment=\
        "Public IP xxx.xxx.xxx.43 HTTPS" dst-address=xxx.xxx.xxx.43 \
        dst-port=443 protocol=tcp to-addresses=10.0.0.253 to-ports=443
    add action=masquerade chain=srcnat dst-address=10.0.0.253 dst-port=443 \
        out-interface=bridge1 protocol=tcp src-address=10.0.0.0/24
    add action=dst-nat chain=dstnat comment=\
        "Public IP xxx.xxx.xxx.43 HTTP" dst-address=xxx.xxx.xxx.43 \
        dst-port=80 protocol=tcp to-addresses=10.0.0.253 to-ports=80
    add action=masquerade chain=srcnat dst-address=10.0.0.253 dst-port=80 \
        out-interface=bridge1 protocol=tcp src-address=10.0.0.0/24
    add action=dst-nat chain=dstnat comment=\
        "Public IP xxx.xxx.xxx.43 HTTP 20080" dst-address=\
        xxx.xxx.xxx.43 dst-port=20080 protocol=tcp to-addresses=10.0.0.206 \
        to-ports=20080
    add action=masquerade chain=srcnat dst-address=10.0.0.206 dst-port=20080 \
        out-interface=bridge1 protocol=tcp src-address=10.0.0.0/24
/ip route
    add distance=1 gateway=xxx.xxx.xxx.41
/ip service
    set ftp disabled=yes
    set www port=20081
    set ssh disabled=yes
/ip smb shares
    set [ find default=yes ] directory=/pub
/ppp secret
    add name=John password=xyz1 profile=sstp-profile service=sstp
    add name=Peter password=xyz2 profile=sstp-profile service=sstp
    add name=Ellis password=xyz3 profile=sstp-profile service=sstp
    add name=Porter password=xyz4 profile=sstp-profile service=sstp
    add name=Tora password=xyz5 profile=sstp-profile service=sstp
/system clock
    set time-zone-name=Europe/Copenhagen
/tool mac-server
    set allowed-interface-list=mactel
/tool mac-server mac-winbox
    set allowed-interface-list=mac-winbox

Just to be clear:

Like the original poster stated, the following is also true for me:

No queues are configured
No flow control configured
No traffic shaping

try to dissable all your firewall rules. Then just add a src-nat masqurade and test bandwith. I think this might have somethig to do with your packetflow. Best is to just have the setup:

Wan ip
Lan ip
nat

No other settings at all. Then try. If this is ok. try to add your setup on parameter at the tiine . and see what makes speed go down. (firewall)

Thanks for the advice, I will try that in evening.