What kind of issue you encountered with fasttrack? You can use connection mark to skip fasttrack for certain connections or for use with queues etc. You will have to disable compression & encryption on pppoe for it to work with fasttrack or else the the performance will be lower than without fasttrack enabled.

RB750Gr3 & ER-X (I have both) is what I generally recommend for people wanting a better router but already had existing ac wifi routers/aps. RB750Gr3 routing throughput is significantly better the older single core MIPSBE RBs. But the sustained max throughput using hardware queue is a bit lower and inconsistent than I hoped for (~1600mbps instead of > 1800mbps). But still it is much better throughput than my ER-X (~900mbps) even though they have the same chipset. Maybe ER-X was crippled by design to avoid competing with ERL-3. But pity RB750Gr3 don't have POE out or else you can use it directly with wAP ac/hAP ac/hAP ac lite.

jio With Fasttrack on and load balancing, browsing is slow. It's odd. It takes a few secs for a page to load up but once it does, loading subsequent pages are ok. Speedtest loads slow but tests at full speed. So not sure where's the prob. Feels like a prob with new connections but ok if established or related. Also one of the Mikrotik guys, Uldis I think, said Fasttrack not compatible with PCC. Not sure what he meant by that. I see if I can find that post again.

Anyway I was already in over my head with the load balancing so I turned off FT to concentrate on getting the load balancing working.

The 750Gr3, I think, is awesome. It is so cheap. How much is the ER-X from a local supplier?

This post has been edited by soonwai: Feb 28 2017, 09:30 PM

Looks like RB750Gr3 or the ER-X will fit my need for a new NAT router with PPPoE linkup to Time Fibre 500mbps.

Planning to dedicate my Asus AC68U to wifi duty soon, do you reckon the RB750Gr3 with fasttrack will be quicker than the ER-X with hardware-offloading? Both are priced pretty close.

Hmm. Will try setup load balancing PCC with fastrack & see. I only had multi wan setups with queues, so no fasttrack for those.

Yeah, RB750Gr3 is really good price/performance. And dude server support is a plus. Much better than buying overpriced consumer wifi router if you already had ac wifi router given by the ISP. If you need fancy non-networking stuffs from those overpriced routers, just use cheap devices such as pi3 & odroid c2. The cpu is faster and won't cripple or destabilise your network under heavy load. I wished RB960PGS had the same chipset as RB750Gr3. Anyway ER-X is around 300 if not mistaken. I got mine from eurodk though.


I did some test before, I get about 1600mbps on RB750Gr3 & 900mbps on ER-X. Speed on RB750Gr3 seems to be fluctuates more, but the average is about 1600mbps. Tested with 1 VM as client, a router as PPPoE client, another VM as PPPoE server with encryption & compression disabled . Each VM had a dedicated LAN port allocated to it. But judging from recently updated block diagrams of RB750Gr3 indicates it only had that bandwidth throughput on some configurations.

Edit: Earlier RB750Gr3 spec sheet listed the 1640mbps, which matched my test results. But revised spec sheet listed it as 1972mbps. Not sure if it's due newer board revision or something. If anyone else had RB750Gr3, please test if you can even get more than 1800mbps in routing performance.

This post has been edited by jio: Feb 28 2017, 10:39 PM

Interesting - the RB750Gr3 is cheaper too. Other than a smaller flash storage it seems to have similar specs to the ER-X.

Testing out the PCC load balancing setup from yesterday. Looking good downloading a torrent.
Currently FastTrack still off. RB2011 CPU about 70%.


imgur.com loading halfway only, I wonder if it's got something to do with the load balancing. Scratch that, it's not just me.

This post has been edited by soonwai: Mar 1 2017, 02:56 AM

jio This is what Mikrotik's strods said about Fasttrack & PCC.
https://forum.mikrotik.com/viewtopic.php?t=111021#p551668

I'm still testing PCC with FT off. So far it's fine. Once I'm done, I'll reenable FT and see what happens.

Observations with FT on. Tried different classifiers all the way down to src-address.
• speedtest.tm.com.my times out
• websites loads slow most of the time


This post has been edited by soonwai: Mar 1 2017, 03:40 PM

Wow bro you are hardcore, you can apply for second phone line for second UniFi? Is there any condition to do it?

No lah, not that hardcore, just using my neighbour's unifi30. The hap lite acting as a wlan repeater for their wifi (with their blessings, of course.) If got cable, would be better.

OK, I forgotten about the routing mark at the output chain. But I think you can still use fasttrack on your default WAN & only use marking on your secondary WAN instead of marking all of it. Then you change the fasttrack rule to only match those without connection mark etc.

I'll play around with it and see if anything works. Thanks.

wanttotree You're running 6.39rcxx right? Do you see this on your CCR?

RB2011UAS-2HnD on 6.39rc38
No scripts scheduled. Freshly rebooted. I have these environment variables. Any ideas what they are?

Updating to 6.39rc40 broke pppoe-client. PPPoE remote address unreachable.

More here: https://forum.mikrotik.com/viewtopic.php?f=...=586517#p586517

Anyone here facing this problem?

Update: Mikrotik has replied in the forum, seems to be rc40 bug.

This post has been edited by soonwai: Mar 2 2017, 10:38 PM

Im not running that bro. Currently on stable version. 6.38.3
Any reason why i might wanna try the rc40?

Not really. I was trying the previous rc for the RSTP probs earlier. Then upgrade to this rc40 and bye-bye my pppoe client. Not 100% sure whether it's my config or the rc's bug. RC40 had some TCP MSS changes.

Update: Mikrotik has replied in the forum, seems to be rc40 bug. That was fast. 2 hrs from the time I posted about the prob to their reply. So:

Warning: UniFi & Maxis users. Do not upgrade to 6.39rc40. It will break pppoe-client.
LOL, the connection will work while you're torching pppoe-out1.
Just released 6.39rc41 fixes this bug.

This post has been edited by soonwai: Mar 3 2017, 10:50 PM

https://unimus.net/

Configuration management and automated backups for your routers, switches, etc... Supports Mikrotik, Ubiquiti, Cisco, TP-Link and more. Free for up to 3 devices.

May be useful to somebody.

*disclaimer: I was a beta tester before release. No other affiliation otherwise.

Hi jio, thanks for your suggestion. It got me headed in the right direction.

I excluded WAN2 connections from FastTrack. That's all I did and it seems to be working. FastTrack is back on and everything seems to be ok. CPU usage down from 80% to 50% when both WANs are maxed at 30mbps each. Not sure if this is the correct way. I'll let this simmer for a few days and see if there're any probs.

Marking only the secondary WANs is what I normally do as packet marking will cause higher CPU load.
It is possible to use fasttrack with routing mark as long as it is marked in prerouting chain. So you can enable fasttrack on the secondary WAN as well.

CIA Exploit against RouterOS
What do you think? Cause for worry? Disable http/https services?
https://wikileaks.org/ciav7p1/cms/page_16384604.html

This post has been edited by soonwai: Mar 8 2017, 01:13 AM

Don't matter much if you secure your network properly, unless it is done internally via your management network. Can't understand why there are still got plenty of idiots leaving their network appliances accessible directly externally without VPN & even worse, using the common port. That just inviting script kiddie to hammer it until they manage to login or new exploits that can bypass it altogether. This especially those leaving the management interface (ssh, http, https etc) of their router accessible directly from the internet. Yeah, as if using using cert only authentication will guarantee there is no exploit abusing some bug to bypass it. IMO, those affected by it really deserve it as they won't learn their mistake until it affected them. Oh well, maybe they really that ignorant & will only knew such possibilities if it hit mainstream news channel.

6.39rc45 breaks Simple Queue PCQ.
You may need to reset to recover your router. So don't upgrade to 6.39rc45 if you use PCQ.