[Update 8 Sep 2020] As it turns out, it is a case of the Mikrotik CSS326 or CCR2004 being picky with the GbE adapter of choice. Swapping out the network adapter restores full link speed immediately. The same "slow" adapter could obtain full speeds with other network equipment, which is wh...

I have a similar setup as you. You need to assign an IP to a separate interface with the routed /29 address (e.g. port2 with IP 89.19.61.249/29), and then connect all other clients to that interface, either via a switch or by bridging additional interfaces to port2. Note that the first and last IP i...

[Update 4 Sep 2020] I've updated the CCR2004 firmware to 6.47.3, but that didn't change the routed /29 throughput.

I am using a CCR2004 as my main router. My ISP has provided me with a /31 point-to-point WAN transport link, as well as a separate routed /29 subnet. The ISP connection is delivered via a SFP+ handoff and it goes straight to the CCR2004's sfp-sfpplus1. I have completed the usual setup (with the /31 ...

You need to bridge the port you're connecting the server to and your WAN port (ether1), as they're within the same subnet.
Additionally, you'll need to exclude the server's IP from NAT srcnat or masquerade, else it will be seen as using 1.1.1.97 for outgoing.

Hi NiPh, I'm trying to something similar, I have several VM running within my network, each of these VM is running a socks 5 server at port 1080 and I have mark routing rules under Mangle to route specific IP addresses to specific proxies. But it wouldn't work. The only way I got it to work is by co...

I have subscribed to a VPN service and configured multiple virtual interfaces as PPTP clients on the Mikrotik for various rule-based routing purposes. Since the VPN is a shared service, other customers connecting to the same VPN gateways would be placed in the same private subnet as my virtual inter...

I have a CCR1036 running firmware 6.43.4. Currently, the router is configured as a PPTP client, with normal devices connecting directly to the Internet and specific devices routing via that VPN link using the source address routing mark + NAT masquerade. All of these are handled at the router level ...