Community discussions

MikroTik App
 
jgro
newbie
Topic Author
Posts: 49
Joined: Sat Jun 10, 2017 7:33 am

Fasttrack on input chain?

Thu Jun 29, 2017 4:35 am

The default firewall configurations do not include action=fasttrack-connection on the input chain. Why is this? Is there any reason it is a bad idea? It seems to me to be a good idea when using VPN or PPP.
 
User avatar
macgaiver
Forum Guru
Forum Guru
Posts: 1773
Joined: Wed May 18, 2005 5:57 pm
Location: Sol III, Sol system, Sector 001, Alpha Quadrant

Re: Fasttrack on input chain?

Thu Jun 29, 2017 7:11 am

it only work for forward, all input/output traffic needs to be in slowpath as it always requires some kind of processing.
 
jgro
newbie
Topic Author
Posts: 49
Joined: Sat Jun 10, 2017 7:33 am

Re: Fasttrack on input chain?

Thu Jun 29, 2017 9:50 am

it only work for forward, all input/output traffic needs to be in slowpath as it always requires some kind of processing.
Running SSTP it seems like a lot of packets are going through fasttrak on the input chain once I enabled it, and the connection quality improved.
 
User avatar
macgaiver
Forum Guru
Forum Guru
Posts: 1773
Joined: Wed May 18, 2005 5:57 pm
Location: Sol III, Sol system, Sector 001, Alpha Quadrant

Re: Fasttrack on input chain?

Thu Jun 29, 2017 1:45 pm

Running SSTP it seems like a lot of packets are going through fasttrak on the input chain once I enabled it, and the connection quality improved.
packets that is going through the router from SSTP to other interface are going via forward, that is why you see increase, only SSTP managment packets go to input.
 
SystemErrorMessage
Member
Member
Posts: 390
Joined: Sat Dec 22, 2012 9:04 pm

Re: Fasttrack on input chain?

Thu Jun 29, 2017 3:17 pm

Theres no fasttrack for input output chain, this is because there is no processing to be done on the packet. In the input and output chain you can imagine it as some server running. When the server sends out a packet, theres no NAT that is required for that packet as the source/destination address isnt changed ever. So there really is no processing to be done on the packet itself other than the filtering you've set up.

Fasttrack only works on things that require changing the source and destination address.