ac3 (home router) cannot provide more than 200 Mbps for upload over the air on the wave2 package, while it provides all 400 for download (tariff limit). Does not depend on the client device.
With the old package it gives all 400 Mbps for downloading and uploading. The result does not depend on the config (I tried changing my own config, setting the default config, an empty config with minimal settings for wifi to work. The result is the same).
The sin is that I poked my fingers where it shouldn’t: I changed the CPU core for IRQ wifi (numbered 74 and 91, later restored the value to auto). It seems that everything started from that moment.
netinstall for different versions (from 7.11 to 7.14) does not help, resetting the config and then entering commands into the console does not help. Removing the wave2 package and then installing it does not help.
The reason seems to be that during upload, one core is loaded at 100% (the core on which the wifi IRQ is set by default by the router). Before “playing” with IRQ with my playful hands, this did not happen. Problem on both wifi bands.
I couldn't find any information about this problem.
With a deep bow, I ask for help from the local pros, I have run out of ideas.
what happens when transferring data to the device (400 Mbps- limit in the tariff) what happens when data is transferred from devices to the router (~200 Mbps- limit in the router) In the config, the excess is cut off
/export hide-sensitive terse
Code: Select all
# 2024-02-29 21:49:16 by RouterOS 7.14
# model = RBD53iG-5HacD2HnD
/interface bridge add name=bridge_lan port-cost-mode=short
/interface list add name=WAN
/interface list add name=LAN
/interface wifi channel add band=2ghz-n disabled=no name=channel_2GHz skip-dfs-channels=all width=20/40mhz
/interface wifi channel add band=5ghz-ac disabled=no frequency=5170-5330,5650-5835 name=channel_5GHz width=20/40/80mhz
/interface wifi security add authentication-types=wpa2-psk,wpa3-psk disable-pmkid=yes disabled=no ft=yes ft-over-ds=yes group-encryption=ccmp group-key-update=30m management-protection=allowed name=sec_wifi_default wps=disable
/interface wifi configuration add country=Russia disabled=no manager=local mode=ap name=wifi_default_conf security=sec_wifi_default ssid=PT tx-power=12
/interface wifi set [ find default-name=wifi1 ] channel=channel_2GHz configuration=wifi_default_conf configuration.mode=ap .tx-power=11 disabled=no name=wifi_2GHz
/interface wifi set [ find default-name=wifi2 ] channel=channel_5GHz channel.frequency=5170-5330,5650-5835 configuration=wifi_default_conf configuration.mode=ap .tx-power=13 disabled=no name=wifi_5GHz
/ip pool add name=dhcp_pool ranges=192.168.88.65-192.168.88.254
/ip dhcp-server add address-pool=dhcp_pool interface=bridge_lan lease-time=1d name=dhcp_server_lan
/ip smb set enabled=no
/interface bridge port add bridge=bridge_lan interface=ether2 internal-path-cost=10 path-cost=10
/interface bridge port add bridge=bridge_lan interface=ether3 internal-path-cost=10 path-cost=10
/interface bridge port add bridge=bridge_lan interface=ether4 internal-path-cost=10 path-cost=10
/interface bridge port add bridge=bridge_lan interface=ether5 internal-path-cost=10 path-cost=10
/interface bridge port add bridge=bridge_lan interface=wifi_2GHz
/interface bridge port add bridge=bridge_lan interface=wifi_5GHz
/ip neighbor discovery-settings set discover-interface-list=LAN
/ip settings set rp-filter=strict tcp-syncookies=yes
/ipv6 settings set disable-ipv6=yes
/interface list member add interface=ether1 list=WAN
/interface list member add interface=bridge_lan list=LAN
/ip address add address=192.168.88.1/24 interface=bridge_lan network=192.168.88.0
/ip cloud set update-time=no
/ip dhcp-client add interface=ether1 use-peer-dns=no use-peer-ntp=no
/ip dhcp-server network add address=192.168.88.0/24 dns-server=192.168.88.1 gateway=192.168.88.1 netmask=24 ntp-server=192.168.88.1
/ip dns set allow-remote-requests=yes cache-size=4096KiB doh-max-concurrent-queries=100 doh-max-server-connections=4 doh-timeout=10s use-doh-server=https://dns.quad9.net/dns-query verify-doh-cert=yes
/ip dns static add address=9.9.9.9 name=dns.quad9.net
/ip dns static add address=149.112.112.112 name=dns.quad9.net
/ip firewall address-list add address=10.0.0.0/8 list=local
/ip firewall address-list add address=172.16.0.0/12 list=local
/ip firewall address-list add address=192.168.0.0/16 list=local
/ip firewall filter add action=fasttrack-connection chain=forward connection-state=established,related hw-offload=yes in-interface-list=LAN out-interface-list=WAN
/ip firewall filter add action=fasttrack-connection chain=forward connection-state=established,related hw-offload=yes in-interface-list=WAN out-interface-list=LAN
/ip firewall filter add action=accept chain=forward comment="forward accept established, related" connection-state=established,related
/ip firewall filter add action=drop chain=forward comment="forward drop invalid" connection-state=invalid in-interface-list=WAN
/ip firewall filter add action=drop chain=forward comment="forward drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
/ip firewall filter add action=accept chain=forward comment="forward LAN to WAN" dst-address-list=!local in-interface-list=LAN out-interface-list=WAN
/ip firewall filter add action=accept chain=forward comment="forward LAN to LAN" in-interface-list=LAN out-interface-list=LAN
/ip firewall filter add action=accept chain=forward comment="forward WAN to LAN dstnat'ed" connection-nat-state=dstnat connection-state=new in-interface-list=WAN
/ip firewall filter add action=drop chain=forward comment="forward drop all"
/ip firewall filter add action=accept chain=input comment="input accept established, related" connection-state=established,related
/ip firewall filter add action=drop chain=input comment="input drop invalid" connection-state=invalid in-interface-list=WAN
/ip firewall filter add action=accept chain=input comment="input accept icmp" protocol=icmp
/ip firewall filter add action=drop chain=input comment="input drop all from WAN" in-interface-list=!LAN
/ip firewall filter add action=accept chain=input comment="input accept all from LAN" in-interface-list=LAN
/ip firewall filter add action=drop chain=input comment="input drop all"
/ip firewall mangle add action=change-mss chain=forward new-mss=clamp-to-pmtu out-interface-list=WAN passthrough=no protocol=tcp tcp-flags=syn tcp-mss=1300-65535
/ip firewall mangle add action=change-mss chain=forward in-interface-list=WAN new-mss=clamp-to-pmtu passthrough=no protocol=tcp tcp-flags=syn tcp-mss=1300-65535
/ip firewall nat add action=masquerade chain=srcnat out-interface-list=WAN
/ip firewall service-port set ftp disabled=yes
/ip firewall service-port set tftp disabled=yes
/ip firewall service-port set sip disabled=yes
/ip nat-pmp interfaces add interface=ether1 type=external
/ip nat-pmp interfaces add interface=bridge_lan type=internal
/ip service set telnet disabled=yes
/ip service set ftp disabled=yes
/ip service set www disabled=yes
/ip service set ssh disabled=yes
/ip service set api disabled=yes
/ip service set winbox address=192.168.88.0/24
/ip service set api-ssl disabled=yes
/ip upnp interfaces add interface=ether1 type=external
/ip upnp interfaces add interface=bridge_lan type=internal
/system clock set time-zone-autodetect=no time-zone-name=Asia/Yekaterinburg
/system note set show-at-login=no
/system ntp client set enabled=yes
/system ntp server set enabled=yes manycast=yes
/system ntp client servers add address=time.google.com
/system ntp client servers add address=time.cloudflare.com
/system ntp client servers add address=time.windows.com
/tool bandwidth-server set enabled=no
/tool mac-server set allowed-interface-list=LAN
/tool mac-server mac-winbox set allowed-interface-list=LAN
/tool mac-server ping set enabled=no