I have hotspot running on a wds bridge interface (ros2.9.43), on a RB532 w/64MB.

It works pretty well, except that when it gets up around 30 or so active users, new connections cannot be made from additional users.

The connection tracking max-entries is 110592, but total-entries never climbs up over 1000. I set tcp-established-timeout to 1h to prevent the table from filling up with stale entries. tcp-syncookie is enabled, too.

Users get DHCP assignments just fine, and show up in /ip hotspot host and (if they can even authenticate) /ip hotspot active. DNS works fine.

CPU runs at about 40% most of the time, occassionally spiking up to 65%. Free memory is around 50%.

Any thing i can look at/tune?

Hmm, probably I misunderstand something,
you have topic 'Hotspot Connection Problems'

it works pretty well, except that when it gets up around 30 or so active users, new connections cannot be made from additional users.

then

Users get DHCP assignments just fine, and show up in /ip hotspot host and (if they can even authenticate) /ip hotspot active. DNS works fine.

You need to be more specific, either client is not able to connect to wireless AP at all or he/she has problems to pass data trough HotSpot server.

Users cannot pass traffic. More specific, sometimes users work fine, sometimes they don't. Getting about 20-30 simultaneous users, using cookie and chap auth (had mac auth enabled, but turned it off last night).

Is there any problems when HotSpot is disabled ?
HotSpot should work fine, probably problem is related anywhere else.