Hello can we chat about fast track.

My current understanding is it can move data faster from ether 1 to ether2

But then come all my questions

With fast track do you set firewall rules for which interface

Can you set fastrrack exclusive rules.

I see the obvious benefit it speed and reduced cpu usage.

But is this bypassing ether1 input and forwarding to ether2.

Does fasttack happen in prerouting?

Janis explains some basics in the following Video:
https://youtu.be/CTF8OptALmw

Janis explains some basics in the following Video:
https://youtu.be/CTF8OptALmw

Hello the video is mostly russian i find it hard to understand.


Also i believe he was talking about fastpath

I was asking about fast track ?

Sorry, haven't checked the language. Try this:
https://youtu.be/l2kMAxzHNFY

Fastpath & Fasttrack are explained in the video.

And you can always check the Wiki: http://wiki.mikrotik.com/wiki/Manual:IP/Fasttrack

Your Mikrotik is a router/firewall with a added switch. If you are talking about ether1, ether two you are using the switch and that one only knows MAC addresses so only filtering on those is possible.
The switch part can combine/mirror/etc. ports so it can adapt to your needs.

Yes i had read this wiki thanks
All good info

I discovered the packet flow diagaram

This paxket flow diagram helped me understand the routinf great help for anyone interested

Im now learning about bgp and gre tunnels any further info would be much appreciated

Almost all is available in the Wiki.

Not all of my packets are showing in fire wall rules

And i have disabled fasttack

@normis

trying to get my head around this packetflow diagram

where is the best place to set ip firewall out of these three routing locations

After bridge dst nat and before pre routing

Or after bridge forward and before forward

Or after bridge src nat and before interface htb


?? Or maybe all of them

I would like to use fastpath but i use encryption so i wonder if its easier to turn it off alltogether?

Packets that can be handled by the switch won't show up and are switched outside the firewall/router.