I add more than 200 rules in RAW table, Just all that rules filter DNS pack.When use L2TP/IPsec, the throughput capacity will downgrade half. but add VPN server address to the top. Just downgrade 1/4.
Disable all rules in RAW ,The throughput will restore.